Cloud DevSecOps Security Architect

CliftonLarsonAllen LLP; Orlando (FL); On-site; USD 140,000 - 190,000; Full time

Job summary

CliftonLarsonAllen LLP in Orlando seeks an Application Security Architect to bridge security with development and cloud environments, leading secure design reviews for proprietary and third-party solutions.

The role emphasizes governance, automation, policy-as-code, and building a Cloud Security Posture Management practice across CI/CD pipelines, IaC, containers, and cloud platforms, while collaborating with Development, Cloud, Platform, Data, and Risk teams.

Qualifications

• Experience leading or supporting secure design reviews for application, cloud, and hybrid solutions.
• Ability to review system interaction diagrams and data-flow diagrams.
• Knowledge of CI/CD pipelines, IaC, containers, and software supply-chain security.
• Experience aligning security risks with practical controls and business outcomes.
• Strong communication of risks and security requirements to diverse stakeholders.

Responsibilities

• Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions.
• Document risks, mitigations, owners, exceptions, and residual risk decisions.
• Review architecture diagrams and data flows for security controls.
• Identify trust boundaries, integration points, and data stores.
• Develop reusable security standards, templates, and architectural guidance.
• Establish a Cloud Security Posture Management practice across teams.
• Assess cloud permissions, secrets management, IaC, container images, and deployment patterns.
• Implement policy-as-code, automated validation, and guardrails.
• Provide technical security leadership across multiple functions.
• Translate risks into actionable controls and business outcomes.

Skills

Secure design reviews

Cloud security

DevOps security

CI/CD pipelines

GitHub Actions

Security architecture

Stakeholder communication

Education

Bachelor's degree

Tools

Terraform

Kubernetes

Job description

CliftonLarsonAllen LLP in Orlando seeks an Application Security Architect to bridge security with development and cloud environments, leading secure design reviews for proprietary and third-party solutions.

The role emphasizes governance, automation, policy-as-code, and building a Cloud Security Posture Management practice across CI/CD pipelines, IaC, containers, and cloud platforms, while collaborating with Development, Cloud, Platform, Data, and Risk teams.