Security Architect – Cloud

This is a fully remote position, open to applicants in United States, +2 more locations.

📋 Description

• Design, implement, and uphold security measures across Azure and AWS cloud platforms.

• Perform ongoing security control evaluations and oversee cloud security incidents and alerts through optimization and automation.

• Assess, validate, investigate, and escalate security alerts and incidents.

• Oversee and maintain CSPM tools and SIEM systems.

• Address security incidents and carry out root cause analysis with remediation suggestions.

• Develop and enforce Infrastructure as Code (IaC) security standards.

• Incorporate security automation into CI/CD pipelines.

• Create and sustain tools for vulnerability scanning, secrets management, and compliance monitoring.

• Formulate and maintain secure design patterns, reference architectures, and security guardrails.

• Apply policy-as-code approaches.

• Collaborate with DevOps, SRE, Engineering, Compliance, and Product teams to integrate security best practices.

• Provide security guidance during architectural reviews and design phases.

• Conduct security awareness training and knowledge sharing sessions.

• Document security procedures, runbooks, and standards.

• Mentor junior security team members and foster a culture of security.

• Evaluate and manage cloud security risks using NIST and CIS Benchmarks.

• Develop and monitor security risk metrics.

• Assist with ISO 27001, SOC 2, PCI-DSS, GDPR, and other compliance initiatives.

• Execute cloud architecture and configuration security assessments.

• Organize internal and external penetration tests and vulnerability assessments.

• Manage stakeholders across various geographic regions and provide updates to leadership.

• Operate both independently and as part of a global virtual team.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience.

• 3–5+ years of experience in cloud security or security engineering roles.

• Proven experience in securing Azure and AWS environments.

• Experience implementing security controls in production cloud settings.

• A history of security automation and tool development.

• Familiarity with ISO 27001, SOC 2, NIST CSF, and CIS Controls.

• Experience with incident response and forensic analysis in cloud environments.

• Strong knowledge of AWS and Azure security services, features, identity and access management, infrastructure, and PaaS security.

• Practical experience with Infrastructure as Code, including Terraform, CloudFormation, and ARM templates.

• Proficiency in programming languages such as Python, PowerShell, Bash, or Go.

• Experience with container security, Docker, Kubernetes, and container image scanning.

• Knowledge of SIEM/SOAR platforms.

• Understanding of DevSecOps, shift-left security, foundational artificial intelligence concepts, zero-trust architecture, API security, OAuth 2.0, OIDC, and SAML.

• Exceptional written and verbal communication skills.

• Strong analytical and problem-solving skills.

• Collaborative mindset with experience in agile environments.

• Proactive in identifying and addressing security risks.

• Willingness to participate in an on-call rotation for security incident response.

🏝️ Benefits

• Professional Development Reimbursement including access to SS&C University.

• Competitive holiday scheme.

• Competitive benefits designed to support staff wellbeing.

• Hybrid Work Model.