Job Summary
The Senior Cloud Security Architect is responsible for designing and implementing enterprise cloud security standards, policies, governance frameworks, and DevSecOps practices across AWS, Azure, and multi-cloud environments. The role involves assessing cloud security posture, identifying risks and vulnerabilities, developing security frameworks aligned with organizational, regulatory, and government requirements, and integrating security controls throughout the software development lifecycle. The architect will provide strategic guidance on cloud security architecture, risk management, and governance while supporting cloud modernization initiatives, compliance efforts, and internal security capability development. Government sector experience, particularly in state or local government environments, is strongly preferred.
Key Responsibilities
• Design and implement enterprise cloud security standards, policies, and governance frameworks for AWS, Azure, and multi-cloud environments.
• Assess current cloud security posture and identify security gaps, vulnerabilities, risks, and opportunities for improvement.
• Develop and maintain enterprise security frameworks aligned with organizational, regulatory, and government requirements.
• Create a DevSecOps roadmap that integrates security controls throughout the software development lifecycle.
• Define and document security processes, procedures, standards, and best practices.
• Provide strategic guidance and recommendations on cloud security architecture, risk management, and security governance.
• Partner with IT leadership and stakeholders to support secure cloud adoption and modernization initiatives.
• Establish security controls and operational processes that support scalable development and cloud operations.
• Develop implementation plans and phased approaches for cloud security and DevSecOps initiatives.
• Create training materials, documentation, and knowledge transfer resources to support internal teams.
• Conduct workshops and training sessions, and provide mentoring to strengthen internal cloud security capabilities.
• Collaborate with technical teams to improve security practices across development, infrastructure, and operations.
• Support compliance, governance, and risk management initiatives.
• Deliver security standards, policy documentation, roadmaps, operational procedures, and related project deliverables.
• Work independently while maintaining alignment with organizational priorities and leadership objectives.
• Lead strategic security initiatives and support large-scale cloud transformation, modernization, and application development programs.
Required Qualifications
• 10+ years of experience in cloud security architecture across AWS, Azure, and multi-cloud environments.
• Experience designing and implementing enterprise cloud security frameworks, governance models, and security standards.
• Strong expertise in DevSecOps practices and integrating security into development and operational workflows.
• Experience conducting security assessments, risk analysis, vulnerability reviews, and remediation planning.
• Deep understanding of cloud security architectures, security controls, compliance requirements, and governance frameworks.
• Experience supporting large-scale cloud transformation, modernization, or application development initiatives.
• Strong knowledge of cloud security best practices, identity and access management, security monitoring, and risk management.
• Excellent communication, presentation, documentation, and stakeholder management skills.
• Experience delivering training, knowledge transfer, and capability-building programs.
• Ability to work effectively with executive leadership, technical teams, and business stakeholders.
• Experience operating in regulated environments with strict security and compliance requirements.
• Government sector experience, including state or local government environments.
• Ability to work independently and lead strategic security initiatives.
• AWS Certified Security - Specialty (SCS-C03) certification.
• Certified Cloud Security Professional (CCSP) certification.
Preferred Qualifications
• Experience supporting state or local government technology transformation initiatives.
• Experience establishing security practices for organizations scaling development operations.
• Microsoft Azure Security Engineer Associate (AZ-500) certification.
• Certified DevSecOps Professional (CDP) or equivalent certification.
• CISSP (Certified Information Systems Security Professional) certification.
• Additional cloud security certifications, including Azure or Google Cloud security credentials.
• Experience building internal security capabilities and reducing dependency on external consulting resources.
