Cloud Security Architect (Hybrid / Remote)

Cloud Security Architect

At Broadridge, we've built a culture where the highest goal is to empower others to accomplish more. If you're passionate about developing your career, while helping others along the way, come join the Broadridge team.

Broadridge is hiring! We're looking for a visionary Cloud Security Architect to drive the security of our AWS and containerized environments. This role combines strategic design with hands-on engineeringbuilding and automating scalable controls that truly work in practice. You'll partner with cloud, DevOps, and security teams to embed protections across identity, network, application, and data layers. From deploying and optimizing WAFs, IAM, CSPM, DSPM, and CNAP to leveraging Infrastructure as Code and modern DevSecOps automation, you'll shape the future of cloud security at scale.

Responsibilities :

• Architect, configure, and maintain security solutions in AWS, including :
• AWS WAF and related web application protection technologies
• IAM roles, policies, and federation
• CSPM and DSPM platforms for posture management and data security
• CNAP tooling for container and workload protection
• Provision and manage security infrastructure using Terraform (modular, reusable IaC), using Git for version control.
• Develop automation in Python or Golang to streamline deployment, monitoring, and remediation processes.
• Integrate security controls into CI / CD workflows for automated guardrails and compliance enforcement.
• Continuously tune security configurations based on real-world traffic analysis, vulnerability scanning, and compliance requirements.
• Collaborate with cross-functional teams to ensure security measures align with compliance frameworks (NIST, CIS, PCI DSS, HIPAA) while maintaining operational efficiency.
• Document security configurations, operational runbooks, and troubleshooting procedures for consistent execution and knowledge sharing.
• Apply deep technical knowledge of the HTTP request lifecycle (methods, headers, status codes), TLS encryption, and certificate management to secure workloads and services

Qualifications :

Compensation Range : The salary range for this position is between $145,000 - $165,000 USD. Broadridge considers various factors when evaluating a candidate's final salary including, but not limited to, relevant experience, skills, and education.

We are dedicated to fostering a collaborative, engaging, and inclusive environment and are committed to providing a workplace that empowers associates to be authentic and bring their best to work. We believe that associates do their best when they feel safe, understood, and valued, and we work diligently and collaboratively to ensure Broadridge is a companyand ultimately a communitythat recognizes and celebrates everyone's unique perspective.

We recognize that ensuring our long-term success means creating an environment where everyone is welcome, where everyone's strengths are valued, and where everyone can perform at their best. Broadridge provides equal employment opportunities to all associates and applicants for employment without regard to race, color, religion, sex (including sexual orientation, gender identity or expression, and pregnancy), marital status, national origin, ethnic origin, age, disability, genetic information, military or veteran status, and other protected characteristics protected by applicable federal, state, or local laws.