Cloud & DevSecOps Application Security Architect

CLA (CliftonLarsonAllen); Atlanta (GA); On-site; USD 150,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Wellness program

Job summary

CLA is seeking an Application Security Architect to bridge application security with engineering, DevOps, and cloud security. You will lead security reviews, define controls, and establish a Cloud Security Posture Management practice to secure cloud-hosted environments and pipelines.

You will collaborate with Development, Cloud, Platform, Product, Data, and Risk teams to translate security concerns into actionable guidance, influence teams, and improve developer engagement with secure design

Qualifications

• Bachelor's degree in a relevant field.
• Experience leading secure design reviews for cloud, hybrid, and on-premise solutions.
• Strong knowledge of application security architecture, cloud security, and DevOps security.
• Experience with CI/CD pipelines, GitHub Actions, infrastructure as code, and software supply-chain security.

Responsibilities

• Lead secure design reviews for proprietary, cloud, and hybrid solutions.
• Document risks, mitigations, risk owners, exceptions, and residual-risk decisions.
• Review system interaction diagrams and data-flow diagrams.
• Identify trust boundaries, security interfaces, and external dependencies.
• Develop reusable security standards, assessment patterns, and architectural guidance.
• Establish and build a Cloud Security Posture Management practice.

Skills

Secure design reviews

Cloud security

DevOps security

CI/CD security

GitHub Actions

Infrastructure as code

Container security

Threat modeling

Security governance

Education

Bachelor's degree

Tools

Azure

Terraform

Black Duck Polaris

Job description

CLA is seeking an Application Security Architect to bridge application security with engineering, DevOps, and cloud security. You will lead security reviews, define controls, and establish a Cloud Security Posture Management practice to secure cloud-hosted environments and pipelines.

You will collaborate with Development, Cloud, Platform, Product, Data, and Risk teams to translate security concerns into actionable guidance, influence teams, and improve developer engagement with secure design