Technical Director of Cloud Security Architecture

Senior Director Of Cloud Security Architecture

As the Senior Director of Cloud Security Architecture, you will oversee the design, implementation, and maintenance of robust security measures to protect our cloud infrastructure and applications. You will lead a team of cloud security architects and engineers, collaborate with cross-functional teams, and ensure that security is integrated into all aspects of the development lifecycle. Your deep technical expertise and strategic vision will help us stay ahead of emerging threats and continuously improve our security posture. You like to stay hands-on, and also oversee and lead others.

Key Responsibilities

• Develop and deploy advanced security capabilities to secure code and production infrastructure throughout the CI/CD pipeline and across non-production and production environments.
• Identify and mitigate high-risk vulnerabilities in the production environment.
• Utilize static and dynamic code analysis to assess the security of application and infrastructure code.
• Implement and operationalize the AWS Security Pillar of the AWS Well-Architected Framework and the GCP Google Cloud Architecture Framework.
• Define, build, and maintain comprehensive Cloud Security Policies, Standards, and Procedures that meet or exceed regulatory requirements.
• Evaluate, implement, and operationalize CSPM, CWPP, and CNAPP solutions across multi-cloud environments.
• Design and implement a Multi-Cloud Security Strategy, focusing on AWS and GCP.
• Introduce and manage commercial and vetted open-source solutions to secure and continuously monitor cloud infrastructure, services, and workloads.
• Support application delivery and DevOps teams in detecting and resolving security vulnerabilities.
• Leverage Terraform to automate the configuration and maintenance of cloud-native and third-party security solutions.
• Implement strong identity foundations through least privilege policies and enable traceability/observability.
• Apply security measures at all layers, from PoP to endpoint, and automate security best practices for scalability and cost-effectiveness.
• Protect data at rest and in transit with appropriate classifications and minimize direct access or manual processing of data.
• Prepare for security events and build capabilities for SOC to detect, contain, eradicate, and recover from incidents.
• Automate security acceptance testing using Python or Go.
• Harden server operating systems and containers.
• Review and analyze security event logs to support incident response efforts.
• Author and communicate blameless postmortems.
• Lead and mentor a team of cloud security architects and engineers, providing guidance and support for their professional development.
• Collaborate with cross-functional teams to ensure security is integrated into all aspects of the development lifecycle.
• Stay up-to-date with the latest security trends, threats, and technology solutions to continuously improve the organization's security posture.
• Maintain hands-on technical skills, roughly 70% of the time while overseeing management duties 30% of the time.

Required Qualifications & Skills

• 5+ years of experience securing and monitoring CI/CD pipelines and cloud infrastructure.
• 10+ years of cloud experience in the IT field.
• 12+ years of Information Technology or Information Security experience.
• Proficiency in writing Lambda functions in Python or Go.
• Strong command and understanding of AWS and GCP Security Reference Architecture (SRA).
• In-depth knowledge of AWS cloud internetworking concepts.
• Experience leveraging AWS security and compliance services such as IAM, AWS WAF, and more.
• Expertise in securing Kubernetes, containers, and microservices.
• Experience using Terraform to deploy security-oriented infrastructure and configure security services.
• Proven leadership skills with the ability to manage and mentor a team.
• Excellent communication and collaboration skills to work effectively with stakeholders at all levels.
• Strong problem-solving skills and the ability to think critically and strategically.

Preferred Qualifications

• Experience with commercial cloud-native application protection platforms such as Prisma Cloud.
• Working knowledge of GitLab.
• Desirable Certifications: AWS SysOps Administrator, AWS Certified Solutions Architect, AWS Certified Security Specialty, equivalent GCP, OSCP, GWEB, and GCSA.