Cloud Security Architect "SAE

Overview

Cloud Security Architect
Location – Irvine, CA

Hyundai Auto Ever America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.

HAEA offers a truly global and collaborative environment. Here, you’ll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.

At HAEA, we understand that IT is the cornerstone of today’s fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai’s Global Headquarters and North American operations.

If you’re passionate about technology and eager to make a real impact at a world-class company, Hyundai Auto Ever America is the place to grow your career. Join us and be part of the transformation that’s driving the future of automotive innovation.

The Cloud Security Architect is responsible for defining, evolving, and governing the enterprise Cloud Security Architecture across all cloud service providers. This role sits within the Security Architecture and Engineering organization and serves as the technical authority for cloud security design, standards, and patterns across AWS, Azure, and GCP.

The architect owns the strategic direction of the Cloud Security Standard, ensures consistent security logging and monitoring architecture, and defines the organization’s approach to Cloud Security Posture Management (CSPM) s role partners closely with Cloud Engineering, Platform, Application, and Security Operations teams to ensure secure-by-design cloud adoption without impeding delivery velocity. The key responsibilities of this role are as described below:

• Define and maintain the Cloud Security Architecture for AWS, Azure, and GCP environments.
• Establish secure reference architectures, design patterns, and guardrails for:
  • Identity and access management
  • Network segmentation and connectivity
  • Data protection and encryption
  • Workload and platform security
• Translate threat models, risk requirements, and business needs into actionable cloud security architecture.

• Own the Cloud Security Standard across all cloud providers, including:
  • Strategic direction
  • Technical depth and consistency
  • Lifecycle management and iteration
• Ensure the standard is:
  • Provider-aware yet provider-agnostic where possible
  • Aligned with evolving cloud services and architectures
  • Consistently adopted through design reviews, patterns, and automation
• Provide architectural guidance and risk issue and exceptions analysis as part of the Risk Operation Processes, when deviations are required.

• Define the cloud logging and monitoring architecture across AWS, Azure, and GCP.
• Ensure cloud-native and security-relevant logs are:
  • Standardized across providers
  • Reliably ingested into centralized log management and SIEM platforms
  • Structured to support detection engineering, incident response, and forensic analysis
• Partner with Security Operations to align logging architecture with detection and response use cases.

• Define the organization’s CSPM strategy and architecture across multi-cloud environments.
• Establish:
  • CSPM policy baselines
  • Risk-based prioritization models
  • Integration patterns with risk and remediation workflows
• Ensure CSPM capabilities scale with cloud adoption and provide meaningful security signal rather than noise.
• Guide engineering teams on remediation patterns and sustainable control implementation.

• Act as a trusted security architecture advisor to:
  • Customers
  • Cloud Platform and Infrastructure teams
  • Application and Dev Ops teams
  • Integrated Risk Management and Audit partners
• Lead cloud security design reviews and architecture discussions.
• Support risk assessments, audits, and regulatory inquiries…