3-5 years of relevant experience in cloud security
Cloud certification (Azure/AWS/GCP) required
Experience with cloud security assessments for Azure, Microsoft 365, and/or AWS
Strong written communication skills for executive summaries and detailed reports
Hands-on experience with security controls in Azure and/or Microsoft 365
Familiarity with CSPM tools like Prisma Cloud or Zscaler Posture Control preferred
Responsibilities
Conduct cloud configuration and security posture reviews using CSPM methods
Assess cloud configurations against standards like NIST, ISO, and CIS
Analyze results and deliver client-ready reports with remediation recommendations
Support reviews across key cloud security domains such as identity and access and network segmentation
Collaborate with stakeholders to validate findings and ensure practical recommendations
Assist clients and business leaders with statements of work and engagement delivery
Work cross-functionally to drive adoption of cloud security controls
Benefits
Remote work opportunity within the U.S.
Collaborative work environment with cross-functional teams
Opportunity to work with leading cloud security frameworks
Engagement with diverse clients across various industries
Professional development opportunities in cloud security
Full Job Description
Position Summary: The Cloud Security Architect performs cloud security posture and configuration reviews to identify misconfigurations, security control gaps, support migrations, and opportunities for improvement. This role executes assessment workflows using CSPM-based approaches and delivers clear, prioritized recommendations aligned with client objectives and relevant standards. This is remote based in the United States.
Please note that this role requires permanent authorization to work in the U.S. (i.e. U.S. citizen or permanent resident).
Responsibilities:
Conduct cloud configuration and security posture reviews using CSPM approaches and automated scanning methods aligned with Ankura cloud assessment practices.
Assess cloud configurations against predefined requirements and map gaps to common standards and regulatory expectations referenced in client deliverables, such as NIST, ISO, and CIS.
Analyze results and deliver client-ready reports that include prioritized remediation recommendations and actionable roadmaps.
Support reviews across key cloud security domains commonly covered in cloud assessments, including identity and access, network segmentation, logging and monitoring, workload configuration, and security governance.
Collaborate with engagement leads and stakeholders to validate findings and ensure recommendations are practical and aligned with the client's operating model.
Work with clients and business leaders to support statements of work (SOWs) and engagement delivery.
Work cross-functionally with IT, engineering, and security stakeholders to drive adoption of cloud security controls and operational improvements.
Requirements:
Bachelors degree or equivalent experience
3-5 years of relevant experience
Cloud Certificate (Azure /AWS/GPC) required
Experience delivering cloud security assessments for Microsoft Azure, Microsoft 365, and/or AWS environments, including configuration analysis and remediation planning; experience with GCP and Oracle Cloud is a plus.
Experience configuring Microsoft Copilot and Microsoft Purview is a plus.
Strong written communication skills, with the ability to produce structured executive summaries and detailed findings and recommendations.
Hands-on experience implementing, migrating, and operating security controls in Microsoft Azure and/or Microsoft 365 environments.
Practical knowledge of identity and access management patterns in Microsoft cloud environments (for example, Entra ID and privileged access concepts).
Experience implementing security governance and controls that support compliance and risk management expectations in cloud environments.
Experience with CSPM tools and workflows used in cloud posture reviews, such as Prisma Cloud or Zscaler Posture Control is preferred.
Experience with cloud security posture management and configuration review programs, including translating findings into prioritized remediation plans is preferred.
Familiarity with security frameworks commonly used in cloud assessments, including NIST, ISO, and CIS mappings is preferred
Willingness to travel as needed (approximately 25%)
Please note that this role requires permanent authorization to work in the U.S. (i.e. U.S. citizen or permanent resident).
About Ankura Consulting Group
Ankura Consulting Group is a management consulting firm founded in 2014 and headquartered in Washington, D.C. The company provides consulting services in the areas of data analytics, investigations, disputes and litigation, risk and compliance, and strategy and performance. Ankura Consulting Group serves clients in the healthcare, financial services, energy, and construction industries, among others. The company has offices in the United States, Europe, and Asia.
