Senior Cloud Security Architect (AWS, Zero Trust & DevSecOps)

Skills:

Cloud Security, AWS, Zero Trust, IAM, DevSecOps, NIST 800-53, TCF, CSPM, Microservices Security, API Security, Threat Modeling, Risk Assessment

We are seeking an experienced Senior Cloud Security Architect to design and implement secure, scalable, and compliant cloud-native solutions. The ideal candidate will have deep expertise in information security, cloud architecture (AWS preferred), Zero Trust, and DevSecOps practices .

This role will focus on securing enterprise systems, ensuring compliance with frameworks such as NIST 800-53 and Texas Cybersecurity Framework (TCF) , and driving security best practices across the organization.

Key Responsibilities:

• Design and implement secure cloud-native architectures (AWS preferred)
• Develop and enforce enterprise security architecture standards and policies
• Implement and manage Identity & Access Management (IAM) and Zero Trust Architecture
• Perform threat modeling for complex, distributed systems
• Secure microservices, APIs, and containerized environments (Docker/Kubernetes)
• Configure and manage Cloud Security Posture Management (CSPM) tools
• Integrate security into DevSecOps pipelines and CI/CD workflows
• Conduct risk assessments and present findings to leadership
• Ensure compliance with NIST 800-53, TCF, and other security frameworks
• Implement strategies for data protection (PII, PHI, sensitive data)
• Collaborate with engineering and DevOps teams to embed security best practices

Required Qualifications:

• 8+ years of experience in Information Security and Systems Architecture
• Proven experience designing secure cloud architectures (AWS preferred)
• Strong knowledge of NIST 800-53 and Texas Cybersecurity Framework (TCF)
• Expertise in IAM and Zero Trust Architecture
• Experience with threat modeling and risk analysis
• Hands-on experience securing APIs, microservices, and containerized environments
• Experience with CSPM tools and cloud security monitoring
• Experience implementing DevSecOps practices

Preferred Qualifications:

• Experience securing AI/LLM systems and data pipelines
• Knowledge of data privacy and protection (PII/PHI)
• Experience presenting to executive leadership
• Relevant certifications such as CISSP, CISM, AWS Security Certification