Cloud Security Architect

Location: LAKE FOREST, IL, US,

Work Location Type: Hybrid

Compensation

The anticipated base pay compensation range for this position is $ – $. This role is eligible for an incentive target up to 20% based on achievement of individual and company performance objectives in accordance with the current terms of the incentive program.

Eligibility

This position is not eligible for any form of sponsorship now or in the future. Individuals requiring sponsorship (e.g., OPT or H1B visa status) should not apply. Only individuals authorized to work in the United States now and for the foreseeable future will be considered for this position.

Rewards and Benefits

• Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing.
• 18 paid time off (PTO) days annually for full-time employees (accrual prorated based on employment start date) and 6 company holidays per year.
• 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required.
• Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools.
• Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non-birth parents.

The Information Security team protects all of Grainger, from our systems to our data across the global company. Our infrastructure is powered by cloud, on-premises, and SaaS platforms that keep Grainger, and our customers, working. We use modern tools and practices to stay ahead of evolving security challenges.

The mission of the Security Architecture team is to be the strategic security design partner for Grainger’s technology. As the security architect responsible for Grainger’s cloud platforms, you will be responsible for architecting, advising on, and governing a secure cloud infrastructure supporting business needs. You will support the progressive needs of the business and provide timely, secure and cost-efficient solutions that elevate the company’s cloud security posture.

An advanced role, the cloud architect will deliver resilient architectures at scale to support business initiatives. The role requires deep technical knowledge of cloud computing architecture, security principles, and cybersecurity best practices. A cloud security architect is highly technical and proficient in cybersecurity and systems administration across a wide variety of infrastructure types (SaaS, IaaS, PaaS), with a strong understanding of cloud-native patterns including containerization, serverless, and infrastructure as code.

A deep level of demonstrated experience with AWS is a requirement, with functional knowledge of Microsoft Azure and Google Cloud required.

In this individual contributor role, you will report to the Director of Cybersecurity Architecture and may be based remotely or at our offices in the Chicago area.

• Plan, research, and develop security architecture for cloud solutions (SaaS, PaaS, and IaaS), which may include custom in-house solutions and third‑party solutions.
• Define strategies and roadmaps to support security and company technology goals.
• Communicate the state of cloud security posture to cybersecurity leaders, IT leaders, and other stakeholders through a thoughtful metrics and KPI‑driven message.
• Develop, maintain, and enforce cloud security policies and procedures. Leverage best practices, standards, and baselines such as Cloud Security Alliance Cloud Controls Matrix (CCM), CIS Benchmarks, cloud provider Well‑Architected Framework security pillars, and NIST SP 800‑series.
• Work with teams to define requirements, evaluate architecture, analyze trade‑offs, and recommend solutions.
• Create conceptual and logical architecture designs, including cloud security reference architectures and secure landing zone designs.
• Assess risks through threat modeling and white‑boarding exercises with teams.
• Evaluate products and tools through Proof of Value exercises.
• Advise product teams on the security implications of their roadmaps.
• Partner with…