Cloud Security Architect

Introduction:

The Cloud Security Architect will be responsible for owning end-to-end cloud security remediation and execution, leading the vulnerability management program, designing and implementing cloud remediation strategies, and ensuring security changes occur without business disruption. This role will involve collaborating with cross-functional teams to align execution and communicate progress to senior leadership and stakeholders.

Responsibilities:

• Own end-to-end cloud security remediation and execution
• Lead the enterprise vulnerability management program
• Design, implement, and govern cloud remediation strategies
• Align execution across infrastructure, application, DevOps, and platform engineering teams
• Coordinate with cross-functional teams to ensure scale execution of remediation
• Manage risk throughout remediation, change execution, and cloud transformation initiatives
• Engage with senior leadership and stakeholders to communicate progress and risks
• Design secure cloud architectures, patterns, and guardrails
• Define and enforce cloud security standards, policies, and architectures
• Partner with engineering teams to embed security into CI/CD pipelines and cloud-native development
• Evaluate and integrate cloud-native and third-party security tools
• Perform threat modeling, risk assessments, and architecture reviews
• Drive automation of security controls, remediation workflows, and compliance reporting
• Monitor emerging cloud threats and ensure proactive mitigation strategies

Requirements:

Required:

• Extensive experience as a Cloud Security Architect in large-scale cloud environments
• Hands-on expertise with AWS, Azure, or Google Cloud Platform security services
• Experience leading vulnerability management and remediation programs
• Deep understanding of cloud infrastructure, application security, and DevOps
• Strong knowledge of IAM, network security, encryption, and cloud governance
• Experience designing secure architectures using cloud-native services
• Ability to lead cross-functional teams in multi-cloud environments
• Strong communication skills and ability to influence senior leadership

Preferred:

• Experience owning enterprise-level vulnerability management programs
• Hands-on experience with security automation tools
• Professional certifications such as CISSP, CCSP, CISM, AWS/Azure/Google Cloud Platform Security Specialty
• Background in program management or delivery leadership for security initiatives
• Experience with IaC tools and DevSecOps practices
• Familiarity with regulatory frameworks such as SOC2, ISO 27001, NIST, PCI, HIPAA
• Ability to translate complex security issues into clear business impacts