Lead Cloud Security Architect (GCP)

Overview

The Lead Cloud Security Architect is the principal security advisor for cloud infrastructure, with primary focus on Google Cloud Platform. You own security design decisions, evaluate architecture for vulnerabilities, and guide teams on implementing secure infrastructure across cloud platforms. You work with engineering teams, cloud architects, and leadership to ensure systems meet security and compliance standards while delivering on timeline. The role requires both strategic thinking and tactical execution. You will design critical security controls, conduct threat modeling, validate configurations, and serve as the trusted resource teams turn to for security guidance throughout the development lifecycle.

Responsibilities

• Design security architecture for cloud workloads on Google Cloud Platform
• Create security design documents and decision logs for critical cloud security decisions.
• Partner with engineering and operations teams to implement cloud security services and controls.
• Validate configurations against organizational security policies and cloud platform best practices.
• Ensure alignment with cloud security best practices and applicable compliance requirements.
• Make decisions on critical security controls and document trade-offs between security, cost, and speed.
• Create security guidelines, runbooks, and training for development and operations teams on cloud security.
• Review architecture designs and cloud infrastructure configurations for security risks.
• Conduct threat modeling for high-risk cloud workloads and recommend mitigations.
• Serve as the trusted security advisor to engineering, operations, and leadership teams on cloud security matters.
• Communicate security decisions and risks clearly to both technical and non-technical audiences.
• Complete all responsibilities as outlined in the annual performance review and/or goal setting.
• Complete all special projects and other duties as assigned.
• Must be able to perform duties with or without reasonable accommodation.

This job description is intended to describe the general nature and level of work being performed and is not to be construed as an exhaustive list of responsibilities, duties and skills required. This job description does not constitute an employment agreement and is subject to change as the needs of Cotiviti and requirements of the job change.

Qualifications

• 8+ years of professional security architecture or cloud infrastructure engineering experience
• Bachelor’s degree in computer science, Information Security, or related field
• Deep knowledge of Google Cloud Platform security services and best practices, with openness to other cloud platforms
• Ability to make security decisions and explain trade-offs to technical and non-technical audiences
• Experience with infrastructure-as-code tools (Terraform or similar) and cloud security practices
• Cloud security certification (Google Cloud Professional Cloud Security Engineer, CISSP, or equivalent)

Cognitive / Mental Requirements

• Security judgment-ability to evaluate risk and make sound recommendations
• Communication and influence-ability to present recommendations to both technical and executive audiences
• Problem-solving-ability to break down security requirements into actionable steps
• Collaboration-willingness to work across teams and balance competing priorities
• Ownership-accountability for security decisions and implementation
• Continuous learning-comfort staying current with new cloud services and security practices

Physical Requirements and Working Conditions

• Remaining in a stationary position for extended periods
• Repeating motions that may include wrists, hands, and fingers
• Must be able to provide a dedicated, secure work area.
• Must be able to provide high-speed internet access / connectivity and office setup and maintenance.

Base compensation ranges from $140,000 to $170,000 per year. Specific offers are determined by various factors, such as experience, education, skills, certifications, and other business needs. This role is eligible for a discretionary bonus.

Cotiviti offers team members a competitive benefits package to address a wide range of personal and family needs, including medical, dental, vision, disability, and life insurance coverage, 401(k) savings plans, paid family leave, 9 paid holidays per year, and 17-27 days of Paid Time Off (PTO) per year, depending on specific level and length of service with Cotiviti. For information about our benefits package, please refer to our Careers page.

Since this job will be based remotely, all interviews will be conducted virtually.

Date of posting: 9/11/2026

Applications are assessed on a rolling basis. We anticipate that the application window will close on 12/11/2026, but the application window may change depending on the volume of applications received or close immediately if a qualified candidate is selected.