Cloud Security Architect; Local to Ohio

Position: Cloud Security Architect (Local to Ohio)

Cloud Security Architect (Local to Ohio)

This range is provided by Morph Enterprise. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$90.00/hr - $95.00/hr

Remote – in person for meetings as needed

The Cloud Security Architect is responsible for the establishment of Cloud Security Architecture program.

This resource, working with the IT Governance and Risk Management Office, will support the creation of Cloud Security Architecture program that will include:

• Leading the evaluation, selection, and implementation of Cloud Security detection and monitoring tools (e.g., Microsoft Defender for Cloud, Defender for Identity)
• Ensuring these tools monitor and scan Cloud workloads and servers for secure configuration and vulnerability management
• Work with DAS teams for implementation
• Securing workloads, containers, and orchestration (e.g., Docker/Kubernetes)
• Incorporating Cloud Security Architecture into the Dev Sec Ops /Dev Ops program
• Updating related policy documents
• Establishing Standard Operating Procedures around Cloud Security Architecture
• Reviewing solutions for compliance with Cloud Security standards
• Participating on Project Teams to advise on Cloud Security
• Training Security Team members in related tools and processes (DAS and JFS)

Mandatory Skills

• Deep understanding of AWS, Azure, and/or Google Cloud Platform (GCP)
• Familiarity with cloud-native services (e.g., IAM, VPC, KMS, Security Groups)

Security Architecture & Design

• Designing secure cloud architectures
• Applying Zero Trust principles
• Understanding shared responsibility models

Identity and Access Management (IAM)

• Role-based access control (RBAC)
• Single Sign-On (SSO), MFA, and federated identity
• Privileged access management

Network Security

• Firewalls, VPNs, segmentation, and secure connectivity
• Cloud-native network security tools (e.g., AWS Security Groups, Azure NSGs)

Data Protection

• Encryption at rest and in transit
• Data classification and loss prevention (DLP)

Compliance & Governance

• Familiarity with standards like NIST, CIS, ISO 27001, SOC 2, HIPAA, GDPR
• Policy-as-code (e.g., using tools like OPA, Sentinel)

Dev Sec Ops  & Automation

• Integrating security into CI/CD pipelines
• Infrastructure as Code (IaC) security (e.g., Terraform, Cloud Formation)
• Security scanning tools (e.g., Snyk, Checkov)
• Identifying and mitigating cloud-specific threats
• Using frameworks like STRIDE or MITRE ATT&CK for Cloud

Desired Certifications/Skills

• Certified Cloud Security Professional (CCSP)
• AWS Certified Security – Specialty
• Microsoft Certified:
  Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• CISSP

Seniority level: Mid‑Senior level

Employment type: Contract

Job function: Information Technology

#J-18808-Ljbffr