The Cloud Security Architect will play a critical role in ensuring the security of our clients' digital infrastructure, applications, and data assets. This individual will lead efforts to design, implement, and maintain robust, cloud-based security solutions that protect our clients from cyber threats and vulnerabilities.

As a member of the information security team, the Cloud Security Architect will play a key leadership role in the InfoSec function of security architecture and provide guidance to other enterprise teams for all cloud security-related matters in Azure.

This is a full-time, exempt, remote position.

Responsibilities:

Design, implement, and maintain robust security architecture across our client's cloud infrastructure in Azure.
Identify security gaps, define security standards, and lead the remediation of security risks to deliver continuous improvement initiatives.
Design and implement secure cloud infrastructure configurations, including network segmentation, access controls, and account architecture
Develop, implement, and socialize technical patterns, standards, and guidance for cloud infrastructure and applications
Monitor cloud security posture and conduct regular security assessments and risk analysis to identify vulnerabilities and prioritize remediation efforts
Automate security policies and workflows using scripting languages and cloud native security tools to improve efficiency and scalability
Assist with incident response activities for cloud-related security incidents, including investigation, containment, remediation, and post-mortem analysis.
Collaborate with cross-functional teams (Product, DevOps, Technology, Legal, and Compliance to integrate security practices into cloud deployments.

Requirements:

Deep technical knowledge and hands-on experience with Azure and emerging cloud security technologies.
Expert level knowledge of cloud-based misconfigurations, attack paths, vulnerabilities, and data risks
Extensive knowledge and experience with DevSecOps in an Azure environment and securing CI/CD Pipelines
Azure focused Infrastructure as Code (IaC) proficiency with experience deploying secure infrastructure (Bicep/Terraform/ARM)
Strong Azure security fundamentals and experience administering Entra ID tenants and all associated objects and resources
Azure VNet experience – Understanding of Azure native NGSs, firewalls, and VPNs
Hands-on experience implementing CNAPP solutions (including CSPM, DSPM, CIEM, IaC, Container, and dependency security)
Demonstrated experience developing and implementing security controls, policies, and procedures for cloud infrastructure and sensitive data
In-depth understanding and experience implementing Zero Trust Architecture (ZTA) in the cloud
Strong familiarity with Snowflake and related security concepts, including data encryption and masking, auditing and monitoring, RBAC, and leveraging least privilege principles.
Prior experience implementing and monitoring data loss prevention solutions in a cloud environment
Experience with implementing and utilizing SASE solutions like Zscaler to secure remote access

Supervisory Responsibilities:

None.

Experience:

10+ Years of overall IT Experience with a major emphasis on Information Security.
3+ Years of experience building and integrating systems within cloud providers.
Strong knowledge of cloud providers (Azure).
Knowledge of cybersecurity frameworks (ISO 27001, NIST 800-53, CIS Controls, PCI DSS, HITRUST).

Education:

Bachelor’s degree preferred.
Cloud Security Certifications, CISSP or CCSP certifications are preferred.

TalentRemedy jobs

Cloud Architect