Cloud Security Architect Job Description Template

Our client seeks a Cloud Security Architect to lead the design and development of Azure and AWS security architecture. This position will contribute directly to the enterprise’s global cloud architecture and lead the security vision and strategy for cloud-based applications.

Typical Duties and Responsibilities

• Conduct cloud security planning to determine and describe security necessities
• Maintain knowledge of diverse cloud platforms
• Conduct infrastructure security planning, including firewalls, AppSec, IDS/IPS, SIEM, and scanners for detecting vulnerability
• Develop security criteria, procedures, and policies
• Establish and manage data access controls and provide identity, authentication, and access management design and oversight (IAM)
• Integrate cloud-aware authentication mechanisms
• Perform application vulnerability assessments and evaluations
• Provide guidance and oversight for the correction of discovered vulnerabilities
• Provide DevOps with security oversight and design guidance and oversee DevSecOps initiatives
• Perform security operations (SecOps) responsibilities
• Integrate security into the development lifecycle of software (SDLC)
• Manage the deployment of SIEM software and automated security alerts
• Monitor system activities, logs, and alerts
• Install and service security equipment
• Participate in the software development procedure
• Provide infrastructure support
• Provide guidance on systems hardening for cyber resilience
• Evaluate new security solutions and products
• Explore new threats, attack methods, and techniques
• Utilize security orchestration and response automation (SOAR)

Education

• Bachelor’s degree in computer science, business, information technology, or a related field

Required Skills and Experience

• 10+ years of experience with Cloud platforms like Amazon Web Services (AWS) and Microsoft Azure
• Experience architecting Amazon Web Services (AWS) and Microsoft Azure solutions
• Experience evaluating, designing, implementing, optimizing, and documenting a comprehensive and extensive array of security technologies and processes
• Knowledge of enterprise application software (architecture, development, support, and troubleshooting)
• Experience performing threat modeling and design reviews to evaluate the introduction of new technologies’ security implications and requirements
• Capacity to work in a team environment; excellent interpersonal and communication skills
• Capability to work independently with minimal direction; initiative and motivation to work alone

Preferred Qualifications

• Holds one of the below certifications, or has the ability to obtain one within 6 months of employment:
  • Certified Cloud Security Professional (CCSP)
  • Certificate of Cloud Security Knowledge (CCSK)
  • Systems Security Certified Practitioner (SSCP)
  • Cloud Security Essentials (GCLD)
  • Cloud Security Automation (GCSA)
  • Certified Web Application Defender (GWEB)
  • Public Cloud Security (GPCS)
  • Certified Cloud Penetration Tester (GCPN)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Systems Auditor (CISA)
  • Certified Information Security Manager (CISM)