Cloud Security Architect

Own the cloud security posture management platform: configure findings, drive remediation, and maintain accurate exposure reporting.

Enforce cloud security policies and guardrails across identity, network security, data access, and resource configuration.

Conduct threat hunting, own detection coverage, and treat every incident as an input to something that gets hardened

Stay current on cloud-specific adversary techniques and apply them to detection logic and hardening priorities.

Plan and champion new security technologies, architectures, and products that will support the information security requirements for the firm.

8+ years of progressive information security experience, with 4–6 years of direct, hands-on cloud security exposure.

Production experience operating a cloud security posture management or cloud-native application protection platform.

Hands-on experience across at least two major cloud platforms.

Cloud platform and security knowledge sufficient to interpret and prioritize CSPM findings without guidance

Experience with cloud security policy enforcement: guardrails, baseline controls, or policy-as-code in a live environment

Security operations background: alert triage, event investigation, and incident response

Experience working alongside engineering or development teams as a security partner

Clear written communication across technical and non-technical audiences

Highly self-motivated and directed.

Experience with Azure, AWS, GCP.

Kubernetes and container security experience.

Shift-left experience: IaC pipeline security, pre-deployment misconfiguration checks, or CI/CD-integrated security controls.

Knowledge of common IT regulatory compliance requirements associated with any of the following HIPAA, HITECH, ISO 27001/2, SOC 1/2, SOX, PCI and security best practices and procedures.

Microsoft AZ-500, AWS Security Specialty, or CCSP preferred.

CISSP is a plus but not required.

Job duties are to be conducted in a manner that adheres to privacy laws, as well as follows internal governance related to protecting confidential information and trade secrets, and to securing data and company records.

Standard indoor working environment.

Position requires regular interaction with employees at all levels of the Firm; interface with external vendors, and clients also necessary.

Occasional long periods of sitting while working at computer.

Travel requirement: less than 10%.

Equal Opportunity Employer: disability/veteran