IT Security Architect

Quanta Services provides infrastructure supporting the energy transition across utility, renewable energy, electric power, industrial, and communications industries. The IT Security Architect will design and implement secure multi-cloud architectures across AWS and Microsoft Azure, while embedding with cloud, data, and application teams to build and harden solutions, including AI-driven workloads. The role also develops reference implementations, mentors engineering teams, and communicates security risks to senior leadership.

Responsibilities

• Combine security architecture with forward-deployed engineering: design secure cloud architectures and embed with cloud, data, and application teams to build and harden secure solutions on AWS and Azure
• Design and implement secure reference architectures and secure-by-design patterns for cloud workloads, including landing zones, network segmentation, identity, secrets management, and egress control
• Architect and secure agentic and AI/LLM-driven workloads, including secure integration patterns, API and tool/MCP security, data protection, and guardrails for AI services on AWS and Azure
• Provide security architecture and hands-on engineering for data-platform workloads, with particular focus on Databricks (Unity Catalog, workspace/network isolation, access governance, and secure app/endpoint exposure)
• Build working reference implementations, automation, and infrastructure-as-code that engineering teams can adopt directly, rather than design documents alone
• Architect secure patterns for internet-exposed cloud workloads, including WAF, application gateway, private connectivity, and egress controls
• Partner with the enterprise security architecture function to apply threat models, control baselines, and review standards to cloud and data-platform designs
• Provide technical guidance and mentorship to cloud and engineering teams, and communicate cloud security risk and posture to senior leadership; and
• Adhere to internal standards, policies, and procedures, and perform other duties as assigned

Skills

• * Bachelor's degree in Computer Science, Cyber Security, or a related field, or commensurate experience in cloud security architecture and engineering
• * 7 or more years of relevant IT experience in cloud and application development
• * 5 or more years devoted specifically to security, with deep, hands-on AWS security and Azure cloud security engineering experience
• * Demonstrated experience building and securing solutions on both AWS and Azure (not single-cloud)
• * Hands-on experience building applications or automation, including the ability to develop agentic and AI-driven solutions on AWS and/or Azure
• **Required:** N/A
• **Travels:** No
• **Overnight required:** No
• **Stationary Position:** Frequently
• **Pushing/Pulling/Reaching:** Seldom
• **Lift/carry over:** Less than 10 LBS
• **Vision:** Constantly
• **Hearing:** Frequently
• * Master's degree in Computer Science, Cyber Security, or a related field preferred
• * Hands-on Databricks security experience (Unity Catalog, network isolation, access governance, Databricks Apps exposure) preferred
• * Forward-deployed and embedded engineering experience working directly inside delivery teams preferred
• * Experience with CNAPP/CSPM tooling (e.g., Wiz or Cortex Cloud), EDR/XDR (e.g., CrowdStrike), and modern SIEM preferred
• * Experience in a large, federated, or multi-business-unit enterprise a plus
• **Preferred:** Microsoft Azure Security Engineer Associate (AZ-500) — strongly preferred
• AWS Certified Security – Specialty — strongly preferred
• CISSP or CCSP — preferred
• Databricks or data-platform certification — a plus

Benefits

• Flexible work options
• Educational assistance
• Wellness and Mental Health programs
• Paid Parental Leave
• Employee Referral Program
• Learning and Development Programs
• Office Amenities and Perks

Company Overview