Cloud & DevSecOps Security Architect

CliftonLarsonAllen LLP; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401k

Job summary

CLA is seeking an Application Security Architect to join its technology team in Atlanta. The role bridges application security architecture with engineering, DevOps, and cloud security to lead secure design reviews and implement controls across CI/CD pipelines and cloud environments.

You will establish a Cloud Security Posture Management program, govern security controls, and provide technical leadership across Development, Cloud, Platform, Product, and Risk teams.

Qualifications

• Lead or support secure design reviews for application, cloud, and hybrid solutions.
• Review architecture, system interaction, and data-flow diagrams to identify risk.
• Assess cloud security, DevOps security, and software supply-chain security across environments.
• Communicate technical risks and security requirements to both technical and non-technical stakeholders.

Responsibilities

• Lead secure design reviews for proprietary, commercial, cloud, and hybrid solutions.
• Document identified risks, mitigations, risk owners, exceptions, and residual-risk decisions.
• Review system interaction diagrams and data-flow diagrams.
• Identify trust boundaries, security boundaries, integration points, data stores, and external dependencies.
• Develop reusable security standards, templates, baselines, and architectural guidance.
• Establish a Cloud Security Posture Management practice coordinating people, processes, and technology.

Skills

Application security

Cloud security

DevOps security

Security engineering

CI/CD pipelines

GitHub Actions

Infrastructure as code

Container security

Threat modeling

Education

Bachelor's degree

Tools

GitHub Actions

Black Duck Polaris

Job description

CLA is seeking an Application Security Architect to join its technology team in Atlanta. The role bridges application security architecture with engineering, DevOps, and cloud security to lead secure design reviews and implement controls across CI/CD pipelines and cloud environments.

You will establish a Cloud Security Posture Management program, govern security controls, and provide technical leadership across Development, Cloud, Platform, Product, and Risk teams.