Senior Cloud Security Architect

Allied Resources Technical Consultants is seeking a Senior Cloud Security Architect to improve automated cloud-security remediation across enterprise Azure environments. The role uses Wiz, Terraform, Infrastructure as Code, and DevSecOps workflows to identify and remediate risks, strengthen security controls, and guide engineering teams.

Responsibilities

• Develop and enhance Wiz-driven cloud security remediation workflows across enterprise Azure environments
• Use Wiz and Wiz Code to identify cloud and Infrastructure-as-Code security issues and help translate findings into actionable remediation
• Build, enhance, and audit Terraform modules used to deploy and secure cloud infrastructure
• Develop repeatable remediation patterns that integrate with existing DevOps and DevSecOps workflows
• Integrate security findings and remediation activities into CI/CD pipelines and pull-request-based development processes
• Create and submit pull requests containing infrastructure and security-related changes for engineering review and deployment
• Establish security controls earlier in the development lifecycle through Infrastructure-as-Code scanning and automated security validation
• Develop and maintain Azure security and compliance policies and help enforce cloud configuration standards
• Work with Cloud Engineering, DevOps, Cybersecurity, and application teams to remediate cloud risks without bypassing established Infrastructure-as-Code processes
• Evaluate cloud configurations and deployed resources to identify security gaps, configuration drift, and compliance issues
• Support Cloud Security Posture Management (CSPM), container security, and cloud-security automation initiatives
• Help establish scalable security patterns that can be reused across engineering and cloud-platform teams
• Explore and support the use of AI-assisted and agentic AI capabilities to improve cloud-security analysis, remediation, and automation workflows
• Support cloud incident response and remediation activities when required
• Provide technical guidance and mentorship to engineering and security team members
• Communicate technical findings, patterns, and best practices across the broader organization, including technical demonstrations, knowledge-sharing sessions, and lunch-and-learns
• Serve as a subject matter expert for cloud security, Infrastructure as Code, DevSecOps, and emerging cloud-security technologies

Skills

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or an equivalent combination of education and professional experience
• 10+ years of experience across cybersecurity, cloud security, cloud engineering, infrastructure automation, DevSecOps, or related technical disciplines
• Hands-on experience with Wiz Cloud Security
• Strong hands-on experience with Terraform and Infrastructure as Code
• Experience creating, modifying, reviewing, or auditing Terraform modules within an enterprise environment
• Strong experience securing Microsoft Azure environments
• Hands-on experience working within DevOps/DevSecOps pipelines and modern software-development workflows
• Experience working with Git-based workflows, pull requests, code reviews, and CI/CD pipelines
• Experience developing automated remediation or cloud-security automation processes
• Knowledge of Azure security and compliance policies, cloud governance, and secure configuration standards
• Strong understanding of modern cloud architecture including virtual machines, containers, Kubernetes, serverless technologies, networking, identity, and Infrastructure as Code
• Experience with cloud Identity and Access Management, including Microsoft Entra ID/Azure Active Directory, privileged access, MFA, and related security controls
• Experience with cloud networking concepts including VNets, subnets, VPNs, Network Security Groups, ExpressRoute, and firewalls
• Scripting or programming experience with technologies such as Python, PowerShell, Azure CLI, .NET, or Java
• Strong understanding of cloud-security frameworks and configuration standards such as NIST and CIS
• Ability to operate effectively across Cloud Engineering, Cybersecurity, DevOps, and application-development teams
• Strong communication skills with the ability to explain security concepts, technical patterns, and remediation approaches to a broader technical audience
• Candidates must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J-1, OPT, or CPT
• Hands-on experience with Wiz Code and code-to-cloud security workflows
• Experience integrating Wiz findings into automated remediation pipelines
• Experience implementing security controls within GitHub, Azure DevOps, or comparable CI/CD platforms
• Experience with automated Infrastructure-as-Code scanning and remediation
• Experience developing security pipelines that validate infrastructure changes before deployment
• Experience with AI-assisted security remediation, AI agents, or agentic AI workflows within cloud, DevOps, or cybersecurity environments
• Experience with Microsoft Defender for Cloud
• Experience with container and Kubernetes security
• Experience across AWS and/or Google Cloud Platform in addition to Azure
• Experience with Cloud Security Posture Management and cloud compliance automation
• Microsoft certifications such as:
• Azure Administrator Associate (AZ-104)
• Azure Security Engineer Associate (AZ-500)
• Azure Network Engineer Associate
• Microsoft 365 Security certifications

Benefits

• Flexible hybrid schedule

Company Overview