The Cloud Security Architect will provide strategic leadership on cloud security through the design and delivery of scalable, cloud-native security architectures and the development of standards and reference architectures that accelerate secure cloud adoption. The candidate will translate business objectives and risk management strategies into cloud security capabilities, ensuring the organization can move to and operate in the cloud with confidence.

How You'll Shine:

Cloud Security Architecture:

• Design and maintain a cloud security architecture framework that enables secure adoption of public, private, and hybrid cloud environments aligned to business, technology, and threat drivers.
• Develop and maintain cloud security reference architectures, patterns, and guardrails leveraged across the enterprise — covering IaaS, PaaS, SaaS, and serverless environments.
• Define and govern cloud security standards, policies, and procedures in alignment with audit, compliance, and platform engineering teams.
• Partner with Application Architects, Platform Engineers, and DevOps teams to embed security by design into cloud-native architectures and CI/CD pipelines.
• Build and maintain cloud security strategic roadmaps, including adoption of CSPM, CNAPP, Zero Trust, and cloud identity capabilities.

Cloud Security Consulting:

• Evaluate cloud platform and infrastructure projects for alignment with security, compliance, and cloud-native best practices.
• Lead cloud architecture and design reviews, providing actionable security guidance across AWS, Azure, and/or GCP environments.
• Drive cloud security technology evaluations and proof-of-concept efforts, with a focus on capabilities that scale across a multi-cloud environment.

Vendor Management and M&As:

• Partner with vendor management to assess the cloud security posture of existing and prospective vendors and SaaS providers.
• Lead cloud security assessments for mergers and acquisitions, with emphasis on cloud environment hygiene, identity posture, and data risk.

Travel Requirements:

• Travel requirements will be no more than 3–4 days quarterly, primarily between the Indianapolis and Orlando offices. Estimated Travel: 5%

What You'll Bring:

• Bachelor's degree in information technology, Computer Science, or equivalent experience
• CCSP, CISSP, AWS Security Specialty, or equivalent cloud security certification
• Demonstrated experience designing and securing cloud environments at enterprise scale across one or more major cloud providers (AWS, Azure, GCP)
• Strong understanding of cloud-native security services — identity and access management, data protection, network security, workload protection, and logging/monitoring
• Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), and CNAPP platforms
• Familiarity with infrastructure-as-code security (Terraform, CloudFormation) and DevSecOps pipeline integration
• Deep knowledge of cloud identity architectures including IAM, federated identity, Privileged Access Management, and Zero Trust principles
• Experience with container and Kubernetes security in cloud-native deployments
• Working knowledge of compliance frameworks applicable to cloud environments — PCI-DSS, HIPAA, NIST CSF, CIS Cloud Benchmarks
• Knowledge of data privacy and protection regulations and how they apply to cloud data residency and handling
• Excellent written, verbal, and presentation skills — able to communicate cloud risk clearly to technical and executive audiences
• Strong ability to manage and prioritize multiple concurrent initiatives in a fast-paced environment
• Knowledge of the vacation or hospitality industry a plus
• 5+ years of information security experience

Experience equivalent to the education requirement may be accepted in lieu of the education requirement.

How You'll Be Rewarded:

We offer a diverse range of comprehensive health and welfare benefits to associates who work 30 or more hours per week to meet your needs and support you throughout your career with us. Travel + Leisure Co. benefits include:

Note: Temporary and/or seasonal associates are ineligible for Paid Time Off.

• Medical
• Dental
• Vision
• Flexible spending accounts
• Life and accident coverage
• Disability
• Depending on position, paid time off, parental leave and holidays (speak to your recruiter for additional information)
• Wish day paid time to volunteer at an approved organization of your choice
• 401k with employer match (subject to eligibility requirements, including tenure - speak to your recruiter for additional information)
• Legal and identify theft plan
• Voluntary income protection benefits
• Wellness program (subject to provider availability)
• Employee Assistance Program