{"id":2593368,"url":"https://alion.io/job/cla-cliftonlarsonallen-application-security-architect-cloud-devsecops","title":"Application Security Architect – Cloud & DevSecOps","company":{"id":1778806,"name":"CLA (CliftonLarsonAllen)","domain":"claconnect.com","url":"https://alion.io/company/claconnect","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":87,"open_postings":19,"ghost_share":0,"stale_share":0.684,"repost_share":0.053,"time_to_fill_p50_days":11,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Milwaukee, United States","Austin, United States","Orlando, United States","Atlanta, United States","Dallas, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":110000,"max_usd":219000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":376},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Azure","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-10-14T00:00:00Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T06:24:48Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services.\nWe are seeking an Application Security Architect to join our growing technology team.\nHow You’ll Create Opportunities\nThe Application Security Architect will bridge application security architecture, engineering, DevOps, and cloud security. In this role, you will lead and support secure design reviews for proprietary and third-party solutions, assess technical and data flows, and identify the security controls needed to protect\nCLA’s technology environment.\nYou will also provide technical governance and automation support for security controls across CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, cloud environments, and the software supply chain. A key focus of this position will be establishing a Cloud Security Posture Management practice that connects cloud infrastructure security with automated development workflows.\nIn this role, you will:\nLead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions.\nDocument identified risks, required mitigations, risk owners, exceptions, and residual-risk decisions.\nReview system interaction diagrams and detailed logical, functional, physical, and data-flow diagrams.\nIdentify trust boundaries, security boundaries, integration points, administrative interfaces, data stores, and external dependencies.\nDevelop reusable security standards, assessment patterns, review templates, control baselines, and architectural guidance.\nEstablish and build a Cloud Security Posture Management practice by coordinating the appropriate people, processes, technology, governance, and service expectations.\nAssess cloud permissions, secrets management, deployment architecture, infrastructure as code, container images, orchestration configurations, and cloud-native deployment patterns.\nIdentify opportunities to prevent configuration issues and policy violations before deployment through policy-as-code, automated validation, and reusable engineering guardrails.\nProvide technical security leadership across Development, Cloud, Platform, Product, Data, Information Technology, Enterprise Architecture, and Risk teams.\nConnect code, pipeline, identity, integration, data, and cloud architecture risks to practical security controls and business outcomes.\nDistinguish mandatory security requirements from recommendations and risk-based enhancements.\nEscalate unresolved material risks through established risk-acceptance processes.\nCommunicate technical risks, required controls, exceptions, ownership, and residual risk to technical and non-technical stakeholders.\nBuild strong partnerships, improve developer engagement with Application Security, and influence teams without direct authority.\nWhat You’ll Need\nExperience leading or supporting secure design reviews for application, cloud, commercial, and hybrid solutions.\nExperience reviewing technical architecture, system interaction, and data-flow diagrams.\nExperience with application security architecture, cloud security, DevOps security, and security engineering.\nKnowledge of CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, and software supply-chain security.\nExperience assessing cloud permissions, secrets management, deployment architecture, container images, orchestration configurations, and cloud-native deployment patterns.\nExperience connecting technical security risks to practical controls and business outcomes.\nAbility to communicate technical risks and security requirements to both technical and non-technical stakeholders.\nAbility to build relationships and influence cross-functional teams without direct authority.\nPreferred Qualifications\nProfessional certification such as CISSP, CCSP, or a comparable security, cloud, DevOps, or architecture credential.\nExperience with Azure cloud services, cloud-native security patterns, and enterprise cloud identity platforms.\nExperience with Black Duck Polaris or a comparable software composition analysis and application security platform.\nExperience with Cloud Security Posture Management, container security, policy-as-code, artifact integrity, secrets management, and automated compliance controls.\nExperience conducting threat modeling, architecture risk analysis, secure design reviews, vulnerability management, and risk-acceptance activities.\nExperience working with NIST security and risk-management frameworks.\nFamiliarity with API security, integration platforms, citizen-development governance, and secure container orchestration patterns.\nJob Requirements\n7 years of general IT experience required. 4 of which are with security of IT systems, and 2 with security design/stratgy.\nBachelor's degree is required. Combination of relevant experience, education, and training may be accepted in lieu of degree.\nEqual Opportunity Employer/Protected Veterans/Individuals with Disabilities\nClick here to learn about your hiring rights.\nWellness at CLA\nTo support our CLA family members, we focus on their physical, financial, social, and emotional well-being and offer comprehensive benefit options that include health, dental, vision, 401k and much more.\nTo view a complete list of benefits, click here.","description_format":"text","description_chars":5442,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps","Accounting & Bookkeeping Services","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-15T06:24:48Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":11,"reasons":["conf:3","win:early","comp:brand"],"computed_at":"2026-10-15T09:29:48Z"},"pay":null,"html_url":"https://alion.io/job/cla-cliftonlarsonallen-application-security-architect-cloud-devsecops","json_url":"https://alion.io/job/cla-cliftonlarsonallen-application-security-architect-cloud-devsecops.json","meta":{"generated_at":"2026-10-15T09:29:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14235,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1778806},"rest":"https://alion.io/mcp/rest/get_company?id=1778806"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcla-cliftonlarsonallen-application-security-architect-cloud-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcla-cliftonlarsonallen-application-security-architect-cloud-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcla-cliftonlarsonallen-application-security-architect-cloud-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cla-cliftonlarsonallen-application-security-architect-cloud-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcla-cliftonlarsonallen-application-security-architect-cloud-devsecops"}]}