Cloud Infrastructure Security Architect: Enterprise to Edge

TikTok; New York (NY); On-site; USD 112,000 - 162,000; Full time

Job summary

TikTok is seeking a senior security architect to own security architecture and control frameworks across hybrid/multi-cloud environments, including on-prem data centers and major cloud providers. You will lead threat modeling, automate security validation, and drive secure design practices across engineering teams.

The role emphasizes implementing defense-in-depth, policy-as-code, and scalable IaC to enforce baselines while maturing cloud network security and centralized logging.

Qualifications

• Proven expertise in designing and implementing security controls across Hybrid and Multi-Cloud environments (e.g., Data Centers, AWS, Azure, GCP, OCI).
• Hands-on experience with key cloud security tooling and concepts (CSPM, CNAPP, CASB, DLP).
• Solid experience with threat modeling, risk assessment methodologies, and security validation techniques.
• Demonstrated ability to automate security control implementation and validation using tools or scripting.
• Strong working knowledge of industry security frameworks (e.g., NIST CSF, ISO 27001) and regulatory requirements (e.g., GDPR, SOX)
• Ability to work 5 days a week in office

Responsibilities

• Own security architecture and control frameworks across self-built data centers, OCI, AWS, Azure, and GCP in hybrid/multi-cloud environments.
• Implement defense-in-depth controls across IaaS, PaaS, containers, and IAM for infrastructure.
• Lead threat modeling and architecture reviews to identify and mitigate risks before production.
• Embed automated security scanning, policy-as-code, and approval gates into CI/CD pipelines.
• Build scalable IaC frameworks to enforce security baselines and eliminate configuration drift.
• Partner with engineering, infrastructure, and business teams to shift security left in the design lifecycle.
• Drive control maturity through regular assessments and a roadmap focused on automation and operational efficiency.
• Design and mature cloud network security controls - including VPC architecture, micro-segmentation, and firewall policies, and establish centralized security logging and audit trail coverage.

Skills

Security architecture

Cloud security

Threat modeling

Automation

Regulatory compliance

CI/CD security

Education

Master's degree or higher in a technical field

Security certification (CISSP/CCSP/CCSK)

Tools

Python

Go

CSPM

CNAPP

CASB

DLP

Job description

TikTok is seeking a senior security architect to own security architecture and control frameworks across hybrid/multi-cloud environments, including on-prem data centers and major cloud providers. You will lead threat modeling, automate security validation, and drive secure design practices across engineering teams.

The role emphasizes implementing defense-in-depth, policy-as-code, and scalable IaC to enforce baselines while maturing cloud network security and centralized logging.