Cloud Security Architect

We are looking for an experienced Cloud Security Architect with deep expertise in Google Cloud Platform (GCP) and AWS to lead the design and implementation of secure cloud architectures. The ideal candidate will have a strong background in cloud security, identity and access management, cloud networking, DevSecOps, and modern security technologies, with the ability to work closely with engineering teams to build secure, scalable cloud solutions.

Responsibilities:

• Serve as the Cloud Security Subject Matter Expert (SME) for GCP and AWS environments.
• Design and implement secure cloud architectures following industry best practices.
• Identify security risks across multi-cloud environments and develop mitigation strategies.
• Define cloud security standards, reference architectures, and implementation guidelines.
• Partner with engineering and product teams to integrate security into cloud-native applications and infrastructure.
• Review cloud solutions and AI workloads to ensure secure design, identity management, and data protection.
• Implement and manage Identity and Access Management (IAM) using least-privilege principles.
• Secure cloud networking, including VPCs, firewalls, segmentation, VPNs, and connectivity.
• Evaluate and implement Cloud Security Posture Management (CSPM), CNAPP, and cloud-native security tools.
• Integrate security controls into CI/CD pipelines and DevSecOps workflows.
• Mentor engineering teams on cloud security best practices and secure design principles.
• Stay up to date with emerging cloud threats, technologies, and compliance requirements.

Requirements:

• 13+ years of experience in cloud security, information security, or security architecture.
• Strong hands-on experience with Google Cloud Platform (GCP) security.
• Experience securing enterprise-scale AWS environments.
• Expertise in: Google Cloud Security Command Center (SCC), Cloud IAM, Cloud Armor, Cloud KMS, VPC Service Controls, GKE (Google Kubernetes Engine)
• Strong understanding of cloud networking, including VPCs, DNS, VPNs, routing, and network segmentation.
• Hands-on experience with Kubernetes and Docker, serverless security, Terraform, CloudFormation, or Ansible, AWS CLI, Bash, or PowerShell.
• Experience with DevSecOps, CI/CD security, and Infrastructure as Code (IaC).
• Knowledge of cloud-native security services such as AWS GuardDuty, GCP Security Command Center, WAF, and related security solutions.
• Excellent communication, stakeholder management, and problem-solving skills.

Preferred Qualifications:

• Experience with generative AI (GenAI) or agentic AI for cloud security automation, threat detection, or security operations.
• Knowledge of CNAPP, CSPM, Zero Trust Architecture, and cloud governance frameworks.
• Relevant certifications such as Google Professional Cloud Security Engineer, AWS Certified Security - Specialty, CISSP, and CCSP.