Cloud Security Architect

Responsible for securing and governing enterprise cloud data environments, with a core emphasis on Microsoft 365 and extended coverage across Google services / Cloud, AWS, and Microsoft Azure. The contractor will design and implement scalable, compliance driven security frameworks that support AI-enabled data flows such as Microsoft Copilot and Google AI while enforcing rigorous sensitivity labeling, tagging, data lifecycle governance, and platform-agnostic reporting. In addition to granular data controls, this role encompasses tenant level hardening, zero trust policy enforcement, conditional access configuration, and secure collaboration guardrails. The ideal candidate will architect proactive, future proof protections for hybrid cloud deployments, ensuring operational resilience, regulatory alignment, and cross solution security consistency.

Duties and Responsibilities

• Designing and implementing secure data protection strategies across M365, Google Cloud, AWS, and Azure
• Enabling secure AI integrations such as Google AI into M365 and Microsoft Copilot across environments
• Managing data sensitivity and lifecycle controls using Microsoft Purview and equivalent tools across clouds
• Executing tenant-wide security enhancements with Zero Trust alignment across diverse platforms
• Automating tasks and reporting via PowerShell, Graph API, Google Cloud SDK, AWS CLI, and Power Platform
• Overseeing cross-platform records management, labeling, tagging, and regulatory compliance
• Translating evolving business needs and tech developments into actionable, secure solutions
• Advising on AI governance models and secure data interaction with emerging technologies
• Supporting platform expansion and evaluating new tools for data protection and secure collaboration

Minimum Qualifications

Clearance Level

Certifications

Primary Job Specific Skills

Other Job Specific Skills

Compensation Ranges

Compensation ranges for ASM Research positions vary depending on multiple factors; including but not limited to, location, skill set, level of education, certifications, client requirements, contract-specific affordability, government clearance and investigation level, and years of experience. The compensation displayed for this role is a general guideline based on these factors and is unique to each role. Monetary compensation is one component of ASM's overall compensation and benefits package for employees.

EEO Requirements

It is the policy of ASM that an individual's race, color, religion, sex, disability, age, sexual orientation or national origin are not and will not be considered in any personnel or management decisions. We affirm our commitment to these fundamental policies.

All recruiting, hiring, training, and promoting for all job classifications is done without regard to race, color, religion, sex, disability, or age. All decisions on employment are made to abide by the principle of equal employment.

Physical Requirements

The physical requirements described in "Knowledge, Skills and Abilities" above are representative of those which must be met by an employee to successfully perform the primary functions of this job. (For example, "light office duties' or "lifting up to 50 pounds" or "some travel" required.) Reasonable accommodations may be made to enable individuals with qualifying disabilities, who are otherwise qualified, to perform the primary functions.

Disclaimer

The preceding job description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job.