Cloud Security Architect

Job Overview

Cloud Security Architect

Key Responsibilities

• Architect and implement scalable, secure cloud solutions across AWS, Azure, and GCP
• Establish and enforce unified cloud security baselines, policies, and controls
• Lead threat modeling and risk assessments for multi-cloud workloads
• Guide secure deployment patterns and participate in architecture reviews across business units
• Automate cloud security operations using scripting and IaC tools
• Collaborate with platform teams, security engineers, and DevOps to integrate security into CI/CD pipelines
• Support compliance requirements by aligning cloud environments with frameworks like CIS, NIST, ISO 27001, PCI-DSS, and GDPR
• Monitor and respond to security incidents across cloud platforms and contribute to remediation strategies
• Evaluate emerging technologies and cloud security trends to enhance posture

Technical Skills

• Strong experience with cloud-native security tools across:
  AWS (IAM, Guard Duty, Security Hub, KMS, Config) Azure (Defender for Cloud, Sentinel, Key Vault, Azure Policy) GCP (Security Command Center, VPC SC, Cloud Armor, Cloud DLP)
• Proficient in scripting and automation using

  Python

  ,

  Bash

  ,

  PowerShell

• Infrastructure as Code (IaC) experience with

  Terraform

  ,

  CloudFormation

  ,

  ARM/Bicep

  , or

  gcloud/Deployment Manager

• Familiar with Dev SecOps tools (Jenkins, Azure DevOps, GitHub Actions, etc.)
• Experience in Kubernetes and container security across cloud-managed services (e.g., EKS, AKS, GKE)

Required Skills

• Proven ability to design secure, compliant, and scalable solutions across multi-cloud environments
• Expertise in identity and access management, encryption, network security, and logging
• Strong communication and collaboration skills with the ability to influence cross-functional teams
• Knowledge of incident response, threat hunting, and remediation in cloud environments
• Familiarity with Agile methodologies and continuous security improvement practices

Certifications

Mandatory

• Any

  one or more

  of the following cloud security certifications: AWS Certified Security Specialty Microsoft Certified: Cybersecurity Architect Expert (SC-100) Google Cloud Certified Professional Cloud Security Engineer
• CISSP or CCSP

Good to Have

• CISM

  ,

  CRISC

  ,

  Terraform Associate

  , or platform-specific architect certifications (e.g.,

  AWS Solutions Architect Professional

  ,

  Azure Solutions Architect Expert

  ,

  Google Professional Cloud Architect

  )