Principal Cloud Security Architect

Job Description:

Position Overview

We are seeking a highly skilled Principal Cloud Security Architect with deep experience designing and securing distributed systems that span embedded devices, edge components, and cloud-based infrastructures. This individual will be responsible for evaluating and supporting the security of our cloud-connected robotic and inspection products. They will also support the creation of cloud-based multiple product integrations, both within the company and with partner customers and companies.

The ideal candidate will combine strong software engineering skills with expertise in cybersecurity, secure coding, and modern cloud technologies. You will play a critical role in evaluating system designs, reviewing code, and ensuring secure deployments across the full technology stack.

• Architect and Design:
  Evaluate and document end-to-end system architectures integrating embedded, edge, and cloud components.
• Evaluate and coordinate efforts to establish integrated solutions between multiple product-specific systems.
• Security and Compliance:
  Establish and maintain secure coding and deployment standards.
• Drive adoption of Dev Sec Ops  principles and security automation throughout CI/CD pipelines.
• Perform code reviews and threat modeling for embedded, backend, and cloud software.
• Collaborate with IT and product security teams to ensure compliance with security frameworks (e.g., ISO 27001, NIST, OWASP).
• Evaluate new technologies, frameworks, and tools for secure and efficient deployment.
• Work closely with firmware, backend, and cloud engineering teams to define interfaces and data security requirements.
• Partner with product management and operations to align architecture with product roadmaps and reliability goals.

• Education:
  
  Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Software Engineering, or related field.
• Experience:
  
  7‑10+ years of professional experience in software architecture, system design, or cybersecurity engineering.
• Technical Expertise:
  • Proven experience designing distributed or hybrid cloud systems (AWS, Azure, or GCP).
  • Hands‑on coding experience in modern languages (Python, C/C++, Go, Java, or Rust).
  • Experience evaluating and enforcing secure coding design, particularly for cloud-connected embedded devices.
  • Experience implementing effective CI/CD scanning and analysis tools.
  • Strong understanding of embedded software principles, real‑time systems, and device‑to‑cloud communication (MQTT, REST, gRPC).
  • Familiarity with infrastructure‑as‑code (Terraform, Cloud Formation) and container orchestration (Kubernetes, Docker).
  • Knowledge of CVEs and mitigation strategies in embedded and cloud contexts.
• Preferred:
  Zero‑trust architectures, identity management (OAuth2, JWT, IAM), secure OTA updates, industrial IoT, energy systems, open‑source security contributions, security certifications (CISSP, CEH, CSSLP, AWS/Azure Specialty).
• Soft Skills:
  
  Excellent communication for cross‑functional collaboration; balance innovation with compliance and operational reliability.

Health care coverage, dental and vision, 401(k) with company matching, paid holidays with unlimited time off, discretionary company bonuses, life and disability protection, and eligibility for stock compensation. Positions may also offer additional benefits in accordance with plan documents.

Nextpower is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.