Cloud Security Architect - AWS/Azure/GCP

About the job :

Cloud Security Architecture :

• Design and implement secure cloud architectures across AWS, Azure, and GCP environments.

• Define security baselines, reference architectures, and best practices.

Security Strategy & Governance :

• Develop cloud security strategy aligned with frameworks like ISO 27001, NIST, CIS Benchmarks.

• Establish governance models, policies, and standards for cloud security.

Identity & Access Management (IAM) :

• Architect and implement IAM solutions including SSO, MFA, RBAC, and Zero Trust models.

• Integrate identity providers like Okta, Azure AD.

Cloud Workload Protection :

• Implement security controls for containers, Kubernetes, serverless, and VM workloads.

• Ensure runtime protection and vulnerability management.

Network Security :

• Design secure VPC/VNet architectures, firewalls, WAF, VPN, and Zero Trust Network Access (ZTNA).

• Ensure segmentation and secure connectivity across hybrid environments.

Dev

Sec

Ops Integration :

• Integrate security into CI/CD pipelines using tools like Terraform, Jenkins, Git

Hub Actions.

• Enable shift-left security practices (SAST, DAST, SCA).

Security Monitoring & Incident Response :

• Implement logging, monitoring, and threat detection using SIEM tools (e.g., Microsoft Sentinel, Splunk).

• Lead incident response and threat hunting initiatives.

Compliance & Risk Management :

• Ensure compliance with GDPR, HIPAA, PCI-DSS and other regulatory standards.

• Conduct risk assessments, audits, and security reviews.

Data Security :

• Implement encryption (at rest/in transit), key management (KMS), DLP solutions.

• Secure sensitive data across cloud environments.

Stakeholder Collaboration :

• Work with Dev

Ops, engineering, and business teams to embed security in all phases.

• Provide technical leadership and mentorship to security teams.

Required Skills & Qualifications :

• 10+ years of experience in Cybersecurity, with 5+ years in Cloud Security Architecture

• Strong expertise in :

• AWS Security, Azure Security, GCP Security

• IAM, Zero Trust, Cloud Networking

• Container Security (Kubernetes, Docker)

• Hands-on experience with :

• CASB, CWPP, CSPM tools (e.g., Prisma Cloud, Wiz, Defender for Cloud)

• Infrastructure as Code (Terraform, Cloud

Formation)

• Experience in Dev

Sec

Ops practices and CI/CD security

• Knowledge of threat modeling and risk assessment methodologies

Preferred Certifications :

• AWS Certified Security Specialty

• Microsoft Certified : Azure Security Engineer / Architect

• Google Professional Cloud Security Engineer

• CISSP / CCSP / CISM