Overview In this role you design and govern cloud solutions across AWS, Azure, and GCP to enable secure, scalable, and cost-efficient platforms. You will partner with engineering, security, and platform teams to define reference architectures and modernization roadmaps. You drive migrations and modernization programs focusing on security posture, resilience, and performance. You collaborate across disciplines to embed security by design and governance into cloud initiatives. This is an opportunity to shape secure cloud foundations for a global technology leader.
Compensation / Benefits- medical, dental, vision
- 401(k) with company matching
- employee stock purchase program (ESPP)
- tuition reimbursement
- paid time off and holidays
- wellness and EAP
Responsibilities- Design scalable, highly available cloud solutions using IaaS and PaaS on AWS, Azure, and GCP
- Lead cloud migration initiatives (re-hosting, re-platforming, refactoring, re-architecting) with security performance improvements
- Drive modernization programs to improve scalability, performance, security, and operational efficiency
- Collaborate with engineering, platform, and security teams to define reference architectures and modernization roadmaps
- Optimize cloud infrastructure for performance, availability, security hardening, and cost efficiency
- Establish and govern cloud security architectures aligned with standards and internal policies
- Design identity-first security including IAM, least-privilege, roles, and secrets management
- Implement secure cloud networking (VPN, Direct Connect, ExpressRoute, Cloud Interconnect)
- Configure network segmentation, zero-trust, and advanced security controls
- Secure containers, Kubernetes, serverless, and microservices with image scanning and runtime protection
- Implement IaC using Terraform, CloudFormation, and Azure ARM/Bicep with built-in security controls
- Evolve DevSecOps CI/CD pipelines with security scanning and policy enforcement
- Define cloud security observability (logging, monitoring, alerting, incident response)
- Evaluate emerging cloud and security tech to improve stewardship and resilience
- Develop architecture diagrams, threat models, technical docs, roadmaps, and executive presentations
- Define operating models including security governance, FinOps, tagging, and resource governance
Key requirements- Bachelor's degree in Computer Science or related field with eight years' related experience
- Seven years of hands-on cloud architecture or engineering experience with secure production environments
- Proficiency in AWS, Azure, or GCP with cross-cloud security fundamentals
- Deep understanding of cloud networking, security, containers, Kubernetes, serverless, and microservices
- Proven experience with IAM, encryption, key management, network security, and zero-trust principles
- Knowledge of cloud governance, monitoring, observability, FinOps, and cost management
- Familiarity with compliance frameworks (NIST, ISO, SOC, CIS, PCI)
- Experience embedding security into architecture, IaC, and CI/CD (DevSecOps)
- Strong communication, leadership, and stakeholder management
- excellent communication
- leadership
- stakeholder management
- AWS, Azure, GCP
- IAM and zero-trust
- encryption and key management
