Cloud Security Architect - Multi-Cloud IAM & Defense

• Cloud security design & implementation

• Contribute to and maintain cloud security reference architectures, standards, and implementation patterns for IaaS, PaaS, containers/Kubernetes, and serverless workloads

• Partner with engineering and platform teams to apply approved security patterns in new and existing cloud workloads

• Help implement and operate secure cloud landing zone controls including account/project structures, network segmentation, IAM boundaries, logging, and policy guardrails

• Implement least-privilege IAM for workforce and workload identities

• Apply encryption, key management, tokenization, and data handling standards for sensitive data including payment and healthcare data

• Participate in threat modeling and security design reviews for cloud services and applications

• Ensure required cloud audit logs, telemetry, and security signals are enabled and flowing to centralized monitoring

• Help define and maintain cloud hardening baselines, container/image standards, and configuration compliance controls

• Partner with GRC and audit teams to map technical cloud controls to compliance frameworks

Requirements

• 3+ years of hands-on experience securing workloads in public cloud environments (Google Cloud Platform (GCP), AWS, or Azure)
• Multi-cloud experience preferred
• Solid understanding of core cloud security concepts: IAM, networking, segmentation, logging/monitoring, encryption, key management, secrets management, and workload security
• Experience using infrastructure-as-code and automation tools (e.g., Terraform, Cloud Formation, Bicep) and supporting CI/CD pipelines
• Familiarity with container and/or Kubernetes security fundamentals
• Experience participating in threat modeling or security design reviews
• Strong written and verbal communication skills; able to document designs and explain security requirements to engineering teams
• Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent practical experience)

🔍 ATS Optimization Keywords
Below are skills and terms extracted directly from this job posting to improve Applicant Tracking System (ATS) visibility. This unique feature helps candidates tailor their applications more effectively — a feature exclusive to Job Tailor job listings.

Hard Skills

• cloud security design
• cloud security implementation
• IAM
• network segmentation
• encryption
• key management
• infrastructure-as-code
• Terraform
• Cloud Formation
• Kubernetes security

Soft Skills

• strong written communication
• strong verbal communication
• documentation skills
• collaboration
• problem-solving