Principal Cloud Security Architect

JOB TITLE : Principal Cloud Security Architect

JOB LOCATION : Waltham, MA / Remote 90% (Onsite once per quarter)

WAGE RANGE

• : Full time 167-210K Full Time (based on experience and location)

JOB NUMBER : NGGJP00016848

This position can be located in Brooklyn, NY, Hicksville, NY, or Waltham, MA

Downstate NY $179,000 - $210,000 a year

Massachusetts $167,000 - $196,000 a year

Salary is commensurate with experience and location

REQUIRED EXPERIENCE :

Cloud Security Experience

JOB DESCRIPTION

Principal Cloud Security Architect.

We want to find an innovative, adaptable, and results-oriented Principal Cloud Security Architect for our Cybersecurity team.

As a Principal Cloud Security Architect, you'll design, implement, and maintain a robust security architecture across

Design and implement secure cloud infrastructure configurations including network segmentation, access controls, and account architecture

Assist with the selection, and lead the implementation of security solutions across Azure, AWS, and other major cloud providers

Develop, implement, and socialize technical patterns, standards and guidance for cloud infrastructure and applications

Monitor cloud security posture and conduct regular security assessments and risk analysis to identify vulnerabilities and prioritize remediation efforts

Automate security policies and workflows using scripting languages and cloud native security tools to improve efficiency and scalability

Assist with incident response activities for cloud-related security incidents, including investigation, containment, remediation, and post-mortem analysis

Collaborate with cross-functional teams (Business project teams, Cloud Center of Excellence, DevOps, Engineering, Compliance) to integrate security practices into cloud deployments

About you

Exceptional interpersonal and communication skills with the proven ability to build strong relationships with diverse IT and business stakeholders.

Deep understanding of cloud security concepts, including network security, data protection, identity management, and threat modeling across major cloud providers.

Extensive hands-on experience with Azure, AWS, GCP and other major cloud providers and security tools and technologies (Azure Security Center, AWS Security Hub, GCP Security Command Center, CNAPP tools, etc.).

Strong security foundations to include experience with network security, vulnerability management, penetration testing, security operations, and application security; fundamental security concepts such as encryption, secure protocols and best in class solutions.

Proficiency in scripting languages (Python, PowerShell) for automation and security orchestration.

Familiarity with ICS / SCADA / OT environments and architecture, along with industry-relevant standards such as NIST, CIS benchmarks, CSA CCM, and NERC CIP.

Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities