Cloud & DevSecOps Security Architect

CliftonLarsonAllen LLP; Austin (TX); Sur place; USD 130 000 - 170 000; Plein temps

Résumé du poste

CliftonLarsonAllen LLP is seeking an Application Security Architect to bridge application security architecture with DevOps and cloud security. You will lead secure design reviews, assess data flows, and define security controls across CI/CD and cloud environments.

Key duties include establishing a CSPM practice, guiding security governance, and communicating risks to technical and non-technical stakeholders. Collaboration with multiple teams is essential.

Qualifications

• 7 years of general IT experience required with security focus
• Bachelor's degree required; combination of experience and education may be accepted in lieu of degree

Responsabilités

• Lead and participate in secure design reviews for proprietary, cloud, and hybrid solutions.
• Document identified risks, required mitigations, risk owners, exceptions, and residual-risk decisions.
• Review system interaction diagrams and data-flow diagrams to identify trust and security boundaries.
• Develop reusable security standards, assessment patterns, review templates, control baselines, and guidance.
• Establish and build a Cloud Security Posture Management practice coordinating people, processes, and technology.
• Provide technical security leadership across multiple teams including Development, Cloud, Platform, and IT.

Connaissances

Secure design reviews

Cloud security

DevOps security

Infrastructure as code

Threat modeling

Policy-as-code

Formation

Bachelor's degree

Outils

GitHub Actions

Description du poste

CliftonLarsonAllen LLP is seeking an Application Security Architect to bridge application security architecture with DevOps and cloud security. You will lead secure design reviews, assess data flows, and define security controls across CI/CD and cloud environments.

Key duties include establishing a CSPM practice, guiding security governance, and communicating risks to technical and non-technical stakeholders. Collaboration with multiple teams is essential.