- Architect, design, and continuously improve security across all major cloud platforms – Google Cloud, Microsoft Azure, Amazon Web Services (AWS), and Oracle Cloud – to ensure the confidentiality, integrity, and availability of cloud-based and Internet-accessible systems and services
- Build cloud-native security solutions and tooling from scratch, applying hands-on software engineering and coding expertise to automate and scale security controls
- Lead in-depth project planning and produce clear, comprehensive documentation of security improvements, designs, and architectural decisions
- Partner and coordinate across multiple cross-functional teams to drive security projects through to completion
- Research emerging trends in cloud security and proactively propose improvements and strategic recommendations to leadership
- Manage the organization’s Cloud-Native Application Protection Platform (CNAPP) and drive improvements to the CNAPP platform in order to accomplish cloud security goals
- Build security controls and respond to risks related to the security of client, company, and employee information across multi-cloud environments
- Review cyber risks and provide guidance regarding remediation of gaps to facilitate a hardened multi-cloud environment
MINIMUM REQUIREMENTS – List the minimum requirements of skills, knowledge and the type and length of previous experience necessary for an individual to be considered for this position.
- 7+ years of IT experience
- 5+ years of security experience
- 4+ years of hands-on cloud experience, with demonstrated expertise designing security architecture across multiple major cloud providers
- High-level, hands-on experience creating security architecture and guiding security improvements across all major clouds – specifically Google Cloud, Microsoft Azure, AWS, and Oracle Cloud
- Demonstrated coding experience and a proven track record of building cloud-native security solutions from the ground up
- 3+ years of experience developing and running scripts and using one or more scripting/programming languages (e.g., Python, Go, PowerShell, Bash)
- 3+ years of experience identifying and remediating security vulnerabilities in cloud environments
- Proven ability to conduct in-depth project planning and to document security improvements clearly for both technical and executive audiences
- Proven ability to work with and coordinate across different teams to drive projects to completion
- Ability to research new and emerging trends in cloud security and translate them into actionable proposals for leadership
- Excellent understanding of cloud networking, identity and access management, encryption fundamentals, and secure configuration standards
- Excellent written and verbal communication skills
- Ability to troubleshoot complex security problems independently
- Ability to accurately document security designs and major incident reports viewable by executive leaders
- Ability to properly handle confidential and sensitive information
- Ability to pass US federal government background investigation
EDUCATION REQUIREMENTS – List the minimum requirements of education and/or certification for an individual to be considered for this position.
- Bachelor’s degree in information systems, computer science, or comparable experience
- CISSP certification preferred
- Cloud security certifications highly desired (e.g., Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate, AWS Certified Security – Specialty, Oracle Cloud Infrastructure Security)
- CEH, CHFI, SSCP, or Security+ a plus
essential functions – List up to 5 to 8 brief statements which describe the major activities for which the position is accountable. Do not list all individual tasks or steps necessary to achieve the end results, but stress the end result itself. List in order of importance.
- Architect and guide security improvements across Google Cloud, Azure, AWS, and Oracle Cloud, ensuring infrastructure designs and configurations meet security standards
- Design and build cloud-native security solutions and automation tooling from scratch, leveraging coding and software engineering skills
- Manage the CNAPP platform and drive improvements to it in order to accomplish cloud security goals
- Lead in-depth project planning for security initiatives and maintain thorough documentation of architectural decisions and security improvements
- Collaborate with and coordinate across multiple teams to drive security projects from concept through completion
- Research emerging cloud security trends and present improvement proposals and strategic recommendations to leadership
- Make design change recommendations for improvements to the multi-cloud environments and associated services and configurations
- Participate in and contribute to setting and improving cloud security standards
- Serve as subject matter expert on platform and architecture security across cloud environments
ADDITIONAL CHARACTERISTICS – List any additional skills, knowledge or characteristics that are preferred but not essential.
- Understanding of containerization and orchestration (Docker, Kubernetes, ECS, GKE, AKS, etc.)
- Experience with infrastructure-as-code and policy-as-code (Terraform, CloudFormation, OPA, etc.)
- Understanding of NIST, CIS Benchmarks, and ISO 27001 controls
- Understanding of business impact and critical needs for IT services
- Ability to manage tasks independently and escalate as necessary
- Ability to function in a dynamic environment and manage multiple priorities to meet deadlines
- Strong attention to detail
- Desire to learn security best practices and promote security throughout the organization
Work Environment & Physical Requirements - The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Travel 0-5%