Cybersecurity Architect - Cloud

Overview

Shape our global cloud security landscape:
Drive Zero Trust architecture, CNAPP strategy, and proactive threat resilience. At Nouryon, our global team takes positive action every day, to reach higher collectively and individually. We create innovative and sustainable solutions for our customers to answer society’s needs – today and in the future.

We are looking for a Cybersecurity Cloud Architect to join our OCISO team in Houston. You will be a key technical leader responsible for our enterprise cloud security strategy, serving as the global owner of our CNAPP platform and architecting secure-by-design solutions across our global environment.

• Own the ORCA CNAPP Platform:
  Serve as the global technical owner, accountable for strategy, policy development, alert governance, and risk findings management across CSPM, CIEM, and CWPP.
• Drive Enterprise Cloud Architecture:
  Design secure reference architectures for cloud and hybrid environments, ensuring they embed Zero Trust principles and automated guardrails.
• Lead Cloud Risk & Threat Modeling:
  Conduct cloud-centric threat modeling and attack-path analysis to proactively identify and mitigate risks using frameworks like MITRE ATT&CK.
• Architect Cloud Identity (IAM):
  Govern Cloud IAM solutions, including Entra , Hybrid Identity, federation patterns, and modern identity standards like RBAC/ABAC and SCIM provisioning.
• Enable Dev Sec Ops :
  Partner with engineering teams to embed security into CI/CD pipelines, container workloads, and Infrastructure-as-Code (IaC) to champion shift-left practices.
• Ensure Compliance:
  Lead efforts to maintain compliance with NIST, SOX, NIS2, and ISO 27001, providing clear guidance on regulatory and contractual security requirements.

• Education:
  
  Bachelor’s degree in Cybersecurity, Information Security, or Computer Science.
• Experience:
  
  10+ years in Cybersecurity Architecture, with a proven track record in cloud environments.
• Architectural Expertise:
  Solid foundation in enterprise frameworks such as SABSA, NIST, and TOGAF.
• Security Tooling:
  Deep hands-on experience with CNAPP platforms (e.g., Orca), CSPM, CIEM, and CWPP.
• Identity Management:
  Expertise in Azure AD / Entra , Conditional Access, and Zero Trust access controls.

• Professional certifications such as SABSA, SANS Cloud Security, or Microsoft SC-100 (Cybersecurity Architect Expert).
• Experience with Infrastructure-as-Code (Terraform, Bicep) and container/Kubernetes security.

• A strategic technical leader capable of defining and enforcing security standards at an enterprise scale.
• An influential communicator able to engage senior stakeholders, vendors, and engineering teams to drive secure outcomes.
• A proactive problem-solver who thrives in complex, fast-paced global environments by applying a Zero Trust mindset.

At Nouryon, we provide a great job and friendly coworkers, plus benefits in addition to salary. You will work at the core of our cybersecurity transformation, with the autonomy to shape the future of our cloud-native security posture.

This is a permanent, full-time position based in Houston, TX, reporting to the Deputy CISO. This role requires in-person presence and approximately 25% global travel.

Please apply via our online recruitment system. We will not accept applications via e-mail. We will review applications to determine if there is a match between your skills and the role.

For more information about our hiring process, visit:

We look forward to receiving your application. If you’re looking for your next career move, apply today and join Nouryon’s worldwide team in providing essential solutions that our customers use to manufacture everyday products such as personal care, cleaning, paints and coatings, agriculture and food, pharmaceuticals, and building products.

#We Are Nouryon  #Grow With Us