Application Security Architect – Cloud & DevSecOps

## Application Security Architect – Cloud & Dev Sec Ops Apply :
Milwaukee, WI:
Racine, WI:
Austin, TX:
Orlando, FL:
Atlanta, GA:
Full time:
Posted Today:
R18281

CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services.  We are seeking an
** Application Security Architect
** to join our growing technology team.  ## How You’ll Create Opportunities The Application Security Architect will bridge application security architecture, engineering, Dev Ops, and cloud security. In this role, you will lead and support secure design reviews for proprietary and third-party solutions, assess technical and data flows, and identify the security controls needed to protect  CLA’s technology environment.

You will also provide technical governance and automation support for security controls across CI/CD pipelines, Git Hub Actions and workflows, infrastructure as code, containers, cloud environments, and the software supply chain. A key focus of this position will be establishing a Cloud Security Posture Management practice that connects cloud infrastructure security with automated development workflows.  
** In this role, you will**:
* Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions.
* Document identified risks, required mitigations, risk owners, exceptions, and residual-risk decisions.
* Review system interaction diagrams and detailed logical, functional, physical, and data-flow diagrams.
* Identify trust boundaries, security boundaries, integration points, administrative interfaces, data stores, and external dependencies.
* Develop reusable security standards, assessment patterns, review templates, control baselines, and architectural guidance.
* Establish and build a Cloud Security Posture Management practice by coordinating the appropriate people, processes, technology, governance, and service expectations.
* Assess cloud permissions, secrets management, deployment architecture, infrastructure as code, container images, orchestration configurations, and cloud-native deployment patterns.
* Identify opportunities to prevent configuration issues and policy violations before deployment through policy-as-code, automated validation, and reusable engineering guardrails.
* Provide technical security leadership across Development, Cloud, Platform, Product, Data, Information Technology, Enterprise Architecture, and Risk teams.
* Connect code, pipeline, identity, integration, data, and cloud architecture risks to practical security controls and business outcomes.
* Distinguish mandatory security requirements from recommendations and risk-based enhancements.
* Escalate unresolved material risks through established risk-acceptance processes.
* Communicate technical risks, required controls, exceptions, ownership, and residual risk to technical and non-technical stakeholders.
* Build strong partnerships, improve developer engagement with Application Security, and influence teams without direct authority.  ## What You’ll Need
* Experience leading or supporting secure design reviews for application, cloud, commercial, and hybrid solutions.
* Experience reviewing technical architecture, system interaction, and data-flow diagrams.
* Experience with application security architecture, cloud security, Dev Ops security, and security engineering.
* Knowledge of CI/CD pipelines, Git Hub Actions and workflows, infrastructure as code, containers, and software supply-chain security.
* Experience assessing cloud permissions, secrets management, deployment architecture, container images, orchestration…