Cloud Security Architect

Overview

We Put the World on Vacation
Travel + Leisure Co. is the world’s leading vacation ownership and travel membership company, with a dynamic and growing portfolio of resort, travel club, and lifestyle travel brands. Our dedicated associates help the company achieve its mission to put the world on vacation. Innovation and growth keep our work interesting and fun. Every day is a chance to learn something new and turn vacation inspiration into exceptional experiences for millions of travelers worldwide.

Cloud Security Architect will provide strategic leadership on cloud security through the design and delivery of scalable, cloud-native security architectures and the development of standards and reference architectures that accelerate secure cloud adoption. The candidate will translate business objectives and risk management strategies into cloud security capabilities, ensuring the organization can move to and operate in the cloud with confidence.

Cloud Security Architecture

• Design and maintain a cloud security architecture framework that enables secure adoption of public, private, and hybrid cloud environments aligned to business, technology, and threat drivers.
• Develop and maintain cloud security reference architectures, patterns, and guardrails leveraged across the enterprise — covering IaaS, PaaS, SaaS, and serverless environments.
• Define and govern cloud security standards, policies, and procedures in alignment with audit, compliance, and platform engineering teams.
• Partner with Application Architects, Platform Engineers, and Dev Ops teams to embed security by design into cloud-native architectures and CI/CD pipelines.
• Build and maintain cloud security strategic roadmaps, including adoption of CSPM, CNAPP, Zero Trust, and cloud identity capabilities.

Cloud Security Consulting

• Evaluate cloud platform and infrastructure projects for alignment with security, compliance, and cloud-native best practices.
• Lead cloud architecture and design reviews, providing actionable security guidance across AWS, Azure, and/or GCP environments.
• Drive cloud security technology evaluations and proof-of-concept efforts, with a focus on capabilities that scale across a multi-cloud environment.

Vendor Management And M&As

• Partner with vendor management to assess the cloud security posture of existing and prospective vendors and SaaS providers.
• Lead cloud security assessments for mergers and acquisitions, with emphasis on cloud environment hygiene, identity posture, and data risk.

Travel Requirements

• Travel requirements will be no more than 3–4 days quarterly, primarily between the Indianapolis and Orlando offices. Estimated Travel: 5%.

What You ll Bring

• Bachelor's degree in information technology, Computer Science, or equivalent experience
• CCSP, CISSP, AWS Security Specialty, or equivalent cloud security certification
• Demonstrated experience designing and securing cloud environments at enterprise scale across one or more major cloud providers (AWS, Azure, GCP)
• Strong understanding of cloud-native security services — identity and access management, data protection, network security, workload protection, and logging/monitoring
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), and CNAPP platforms
• Familiarity with infrastructure-as-code security (Terraform, Cloud Formation) and Dev Sec Ops  pipeline integration
• Deep knowledge of cloud identity architectures including IAM, federated identity, Privileged Access Management, and Zero Trust principles
• Experience with container and Kubernetes security in cloud-native deployments
• Working knowledge of compliance frameworks applicable to cloud environments — PCI-DSS, HIPAA, NIST CSF, CIS Cloud Benchmarks
• Knowledge of data privacy and protection regulations and how they apply to cloud data residency and handling
• Excellent written, verbal, and presentation skills — able to communicate cloud risk clearly to technical and executive audiences
• Strong ability to manage and prioritize multiple concurrent initiatives in a fast-paced environment
• Knowledge of the vacation or hospitality industry a plus
• 5+ years of information security experience

Experience…