Cloud Security Architect Job Phoenix area,Arizona USA,IT/Tech

Role & responsibilities

Design and implement secure, scalable cloud architectures across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
Define cloud security strategies, policies, standards, and best practices aligned with business requirements and industry regulations.
Implement Identity and Access Management (IAM), Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Zero Trust security principles.
Secure cloud infrastructure, networks, workloads, containers, APIs, applications, and data through appropriate security controls.
Conduct cloud security assessments, threat modelling, vulnerability assessments, and architecture reviews to identify and mitigate risks.
Implement encryption, key management, secrets management, data protection, and secure backup and recovery solutions.
Integrate security controls into CI/CD pipelines and Dev Sec Ops workflows to enable continuous security validation.
Monitor cloud environments using SIEM, CSPM, and other security tools to detect threats, investigate incidents, and coordinate remediation.
Ensure compliance with security frameworks and standards such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and applicable regulatory requirements.
Collaborate with cloud engineers, Dev Ops teams, application developers, compliance teams, and business stakeholders to embed security throughout the software development lifecycle.
Develop cloud security reference architectures, technical documentation, security guidelines, and incident response procedures.
Evaluate emerging cloud security technologies and recommend improvements to strengthen the organisation's security posture.

Preferred candidate profile

Bachelor's or master's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.
5 to 10 years of experience in cybersecurity, cloud engineering, infrastructure security, or information security, including hands‑on cloud security architecture experience.
Strong expertise in at least one major cloud platform: AWS, Microsoft Azure, or Google Cloud Platform; multi-cloud experience is an advantage.
In-depth knowledge of IAM, network security, encryption, key management, secrets management, Zero Trust, and cloud-native security services.
Practical experience with cloud security tools, CSPM solutions, SIEM platforms, vulnerability management, and incident response.
Proficiency in Infrastructure as Code tools such as Terraform or Cloud Formation, scripting languages such as Python or Bash, and Dev Sec Ops practices.
Understanding of container security, Docker, Kubernetes, API security, and CI/CD pipeline protection.
Knowledge of security and compliance frameworks such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and relevant data protection requirements.
Strong skills in threat modelling, risk assessment, security architecture reviews, and security control implementation.
Excellent analytical, problem-solving, communication, and stakeholder-management skills.
Ability to translate business and regulatory requirements into practical cloud security solutions.
Preferred certifications: AWS Certified Security Specialty, Microsoft Certified:
Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CCSP, or CISSP.