-
Lead the architecture, design, and implementation of cloud security solutions across multi-cloud environments (AWS, Azure, Google Cloud).
-
Develop and maintain cloud security architecture standards, guidelines, and reference models.
-
Perform security assessments, risk analysis, threat modeling, and architecture reviews.
-
Collaborate with engineering, DevOps, and infrastructure teams to integrate security into cloud deployments and CI/CD processes.
-
Define identity and access management strategies and enforce secure authentication and authorization models.
-
Implement and monitor cloud security governance, policies, and compliance frameworks.
-
Ensure compliance with regulatory and industry standards such as NIST, ISO 27001, FedRAMP, SOC2, and PCI.
-
Evaluate, recommend, and implement cloud security tools and technologies including monitoring, logging, and vulnerability scanning solutions.
-
Lead incident response planning, cloud security audits, and root cause analysis of security breaches.
-
Provide technical guidance, mentorship, and leadership to security engineers and stakeholders.
-
Prepare architecture documentation, diagrams, security reports, and executive-level presentations.
-
12+ years of experience in IT security with at least 6+ years in cloud security architecture.
-
Strong hands-on expertise with AWS, Azure, and/or GCP cloud security services and architecture.
-
In-depth knowledge of cloud networking, zero trust security, firewalls, container security, and API security.
-
Experience with IAM, encryption, key management, SSO, MFA, and security automation.
-
Strong understanding of risk management, threat analysis, and security frameworks (NIST, CIS, MITRE ATT&CK).
-
Experience working with DevSecOps practices and CI/CD security integration.
-
Familiarity with cloud security tools such as Prisma Cloud, Tenable, Check Point, Splunk, Sentinel, and CrowdStrike.
-
Ability to lead and communicate effectively with executive leadership and technical teams.
-
Bachelor's degree in Computer Science, Cybersecurity, or related field (Master's preferred).