Cloud Security Architect

Key Responsibilities

Key Responsibilities

1. Hybrid & Multi-Cloud Architecture Design

Architect and implement secure, enterprise-grade multi-cloud infrastructure across AWS and Azure (Google Cloud Platform is a plus), ensuring alignment with benchmarks and corporate security policies.

Adopt complex hybrid connectivity solutions to link on-premise and cloud based systems.

Establish scalable IAM hierarchies, cross-account trust relationships, and organizational units across multiple cloud tenants.

1. Infrastructure Resiliency & Disaster Recovery (DR)

Architect high-availability (HA) and disaster recovery topologies across disparate cloud providers to eliminate single points of failure (e.g., active-active cross-cloud replication).

Develop, document, and test automated failover mechanisms for critical enterprise workloads to ensure zero-downtime objectives.

1. Infrastructure as Code (IaC) & Automation

Define, build, and maintain the the IaC repository using automation platforms.

Implement secure CI/CD deployment pipelines (Jenkins, GitHub Actions) embedded with automated security guardrails and static analysis tools.

1. Technical Advisory & Collaboration

Serve as the primary subject matter expert (SME) on cloud infrastructure for the core Cyber Security team, translating security objectives into concrete cloud configurations.

Collaborate with traditional on-prem network and sysadmin teams to systematically migrate or extend legacy workloads to the cloud without disrupting active operations.

Required Skills & Experience

Enterprise Scale: Minimum 8+ years of experience managing, architecture-designing, and deploying IT infrastructure within a Fortune 500 or equivalent large-scale enterprise.

Multi-Cloud Mastery: Deep, hands-on production experience with at least two major cloud vendors (AWS and Azure are highly preferred). You know their native networking, identity systems, and edge security controls inside out.

Networking: Strong foundational background in traditional on-premises networking (firewalls, load balancers, VLANs, proxies) and how those concepts map directly to cloud-native constructs (VPCs, VNets, Transit Gateways).

Automation-First Mindset: Advanced proficiency with automation toolsets.

Pragmatic Security Knowledge: While you don't need to be a penetration tester, you must thoroughly understand cloud security frameworks and modern identity protocols.

Scripting & Systems Proficiency: Strong proficiency with Python programming, Shell scripting, and Unix/Linux operating systems.

Desired Certifications

(While your hands-on experience matters most, we highly value the following credentials)

AWS Certified Solutions Architect Professional / AWS Certified Security Specialty

Microsoft Certified: Azure Solutions Architect Expert / Azure Security Engineer Associate

CCSP (Certified Cloud Security Professional) or equivalent infrastructure-focused certifications

Preferred / Plus Qualifications

• Familiarity with Secure Email Gateway (SEG) products such as Proofpoint and Fortimail
• Familiarity with Exchange-Online security products such as Sublime security and Abnormal Email Security
• Experience with largescale email broadcast or bulkmessaging platforms
• Exposure to compliance frameworks, audits, and regulatory examinations
• Experience integrating email platforms with monitoring, logging, and AIOps tooling
• Prior experience mentoring senior or midlevel engineers

Key Attributes

• Ability to work independently on complex, ambiguous problems
• Strong analytical and troubleshooting skills
• Excellent written and verbal communication skills
• Selfdriven learner with curiosity for modern tooling and AIassisted development
• Collaborative mindset with the ability to influence across teams and functions