Job SummaryAcuity Brands is seeking a highly experienced and hands-on Security Architect to lead the design and implementation of secure architectures across our cloud-native platforms, connected products, and enterprise applications.
Key Tasks & Responsibilities (Essential Functions)This role requires strong expertise in cloud security (Azure-first), CNAPP, and modern DevSecOps practices, with a focus on proactively reducing risk across infrastructure, workloads, and application pipelines. You will drive security across the full product lifecycle-embedding controls into architecture, development, and operations-while partnering closely with engineering, DevOps, and platform teams.
Skills and Minimum Experience RequiredCloud Security Architecture & CNAPP- Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms
- Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework, including their use for posture management, workload protection, and identity risk analysis. Own and drive Cloud-Native Application Protection Platform (CNAPP) capabilities, including:
- CSPM (posture management and misconfiguration detection)
- CWPP (runtime protection for VMs, containers, serverless)
- CIEM (identity entitlement and least privilege enforcement)
- Kubernetes and container security (AKS, image hardening, runtime controls)
- Experience defining and enforcing cloud security guardrails, landing zone controls, and policy-as-code frameworks
- Define and enforce cloud security baselines, guardrails, and landing zone standards
- Assess and secure:
- AKS/Kubernetes environments
- Infrastructure-as-Code (Terraform, ARM, Bicep)
- Service-to-service and API communication patterns
DevSecOps & Automation- Integrate security controls into CI/CD pipelines, enabling both shift-left and runtime security
- Drive adoption of:
- SAST, DAST, SCA Toolchain
- Container and IaC scanning
- Policy-as-code for scalable enforcement
Security Governance & Enablement- Define and maintain cloud security standards, patterns, and reusable controls
- Drive continuous improvement in security posture and maturity across development teams
- Influence cross-functional teams to adopt secure-by-design and Zero Trust principles
Education:
Bachelor of Science in Computer Science or Information Technology
Preferred Skills and Experience- Effectively document and communicate security assessment findings, recommendations, and remediation strategies to a diverse audience, including technical teams and non-technical business stakeholders, ensuring clarity and actionable guidance for all parties involved.
- Demonstrable ability to analyze business direction and problems, understand long term vision and risk in developing strategic technical solutions.
- Azure Security Certifications are a plus
