Security Architect for Network and Cloud

Nexus Recruitment Group; Taguig; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

We are seeking a highly experienced Security Architect for Network and Cloud to lead the design, implementation, and ongoing development of enterprise cloud and network security architectures across multi-cloud environments. The role emphasizes CNAPP and CASB adoption to protect modern cloud services.

The ideal candidate has extensive experience with Microsoft cloud security tools, IAM solutions, and rigorous risk assessments.

Qualifications

• Bachelor's degree in Computer Science or equivalent professional experience.
• Extensive experience designing and implementing enterprise cloud security solutions.
• Strong working knowledge of Microsoft cloud security tools including Defender for Cloud Apps and Defender for Cloud.
• Experience deploying enterprise CASB and CNAPP solutions.
• Hands-on experience configuring cloud network security components (security groups, NACLs, load balancers).
• Deep understanding of IAM solutions, with preferred experience in Microsoft Entra ID.
• Strong security risk assessment skills and ability to identify misconfigurations and vulnerabilities.
• Excellent written and verbal English communication.
• Certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer Associate are a plus.

Responsibilities

• Design and implement secure, scalable cloud-native security architectures across multi-cloud environments.
• Lead the deployment and management of CASB and CNAPP technologies to protect cloud services and applications.
• Develop and maintain security policies, standards, and best practices for cloud and hybrid environments.
• Conduct risk assessments, security reviews, and audits of cloud infrastructure, applications, and configurations.
• Create and maintain architecture and solution documentation for cloud network security platforms.
• Collaborate with cross-functional teams to ensure security controls are integrated into DevOps and infrastructure processes.

Skills

Cloud security

CNAPP

CASB

IAM

Defender for Cloud Apps

Defender for Cloud

Risk assessment

DevOps security

Cloud network security

English communication

Education

Bachelor's degree in Computer Science

Tools

Microsoft Entra ID

Microsoft Defender for Cloud Apps

Microsoft Defender for Cloud

Job description

Security Architect for Network and Cloud

About the job Security Architect for Network and Cloud

Job Title: Security Architect for Network and Cloud

We are seeking a highly experienced Security Architect for Network and Cloud to lead the design, implementation, and ongoing development of the firm's cloud and network security architecture. This role is critical in overseeing the configuration and operations of enterprise-grade security toolsets and driving adoption of CNAPP (Cloud-Native Application Protection Platform) and CASB (Cloud Access Security Broker) solutions across the organization.

Key Responsibilities:

Design and implement secure, scalable cloud-native security architectures across multi-cloud environments.

Lead the deployment and management of CASB and CNAPP technologies to protect cloud services and applications.

Develop and maintain security policies, standards, and best practices tailored to cloud and hybrid environments.

Conduct risk assessments, security reviews, and audits of cloud infrastructure, applications, and configurations.

Create and maintain comprehensive architecture and solution documentation for cloud network security platforms.

Collaborate with cross-functional teams to ensure security controls are integrated into DevOps and infrastructure processes.

Required Qualifications:

Bachelor's degree in Computer Science or equivalent professional experience.

Extensive experience designing and implementing enterprise cloud security solutions.

Strong working knowledge of Microsoft cloud security tools, including Microsoft Defender for Cloud Apps and Microsoft Defender for Cloud.

Experience deploying and operating enterprise CASB and CNAPP solutions.

Hands-on experience configuring and troubleshooting cloud network security components such as security groups, network ACLs, and load balancers.

Deep understanding of IAM solutions, with preferred experience in Microsoft Entra ID.

Strong application and network security risk assessment skills, including the ability to identify misconfigurations, vulnerabilities, and design gaps.

Expert-level problem-solving and analytical skills.

Additional Skills:

Strong written and verbal English communication skills, with the ability to explain complex technical concepts to non-technical stakeholders.

In-depth knowledge of network security frameworks and compliance standards such as NIST, ISO 27001, and CIS Benchmarks.

Ability to work independently and collaboratively in a fast-paced, global environment.

Preferred Certifications:

CISSP, CCSP, AWS Security Specialty, Azure Security Engineer Associate, or equivalent certifications are a plus.