Cloud Security Architect

System One, Inc.; Birmingham (AL); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Life insurance

Job summary

System One, Inc. is seeking a Cloud Security Architect to lead security architecture and threat modeling for complex enterprise applications, with a focus on AI and agentic AI solutions.

You will evaluate applications, APIs, cloud platforms, SaaS solutions, and distributed systems to identify security risks and define effective controls. You will collaborate with product owners, enterprise architecture, engineering, and security teams to protect sensitive data, strengthen IAM, secure cloud

Qualifications

• Strong AWS expertise and the ability to lead multiple security initiatives across IaaS, SaaS, and internally developed applications.
• Extensive experience with security architecture and threat modeling for complex enterprise applications.
• Knowledge of STRIDE, attack trees, abuse cases, data flow analysis, and trust boundary analysis.
• Hands on experience evaluating security risks in AI, machine learning, and agentic AI applications.
• Advanced AWS knowledge across IAM, networking, compute, storage, RDS, messaging, serverless, ECS/EKS, CI/CD, and AI/ML services.
• Strong understanding of application security, API security, IAM, authentication, authorization, encryption, key management, and data protection.
• Experience translating identified threats into practical security controls and remediation recommendations.
• Knowledge of DevSecOps, pipeline security, container security, infrastructure security, SIEM, CSPM, and CWPP solutions.
• Familiarity with security frameworks and standards such as NIST, OWASP, CIS, FedRAMP, ISO, and SOX.
• Experience with resilient, highly available, API driven, stateless, and integrated cloud or SaaS environments.
• Ability to lead multiple initiatives and communicate effectively with technical and business stakeholders.
• Preferred certifications include CISSP, CCSP, AWS Professional or Specialty certifications, or equivalent credentials.

Responsibilities

• Lead security architecture and threat modeling for complex enterprise applications, with a strong focus on AI and agentic AI solutions.
• Evaluate applications, APIs, cloud platforms, SaaS solutions, and distributed systems to identify security risks and define effective controls.
• Work with product owners, enterprise architecture, engineering, and security teams to protect sensitive data, strengthen identity and access controls, secure cloud environments, and support compliance with enterprise policies and industry standards.

Skills

Threat modeling

Security architecture

Cloud security

Identity and access management

AI security / agentic AI

Stakeholder communication

Program leadership

Tools

AWS

IAM

CI/CD pipelines

ECS/EKS

CWPP

CSPM

Job description

*** no C2C with 3rd parties - W2 candidates only

*** Must be able to work on site 5 days a week - no remote work

Cloud Security Architect

• Lead security architecture and threat modeling for complex enterprise applications, with a strong focus on AI and agentic AI solutions.

• Evaluate applications, APIs, cloud platforms, SaaS solutions, and distributed systems to identify security risks and define effective controls.

• Work with product owners, enterprise architecture, engineering, and security teams to protect sensitive data, strengthen identity and access controls, secure cloud environments, and support compliance with enterprise policies and industry standards.

  Qualifications:

• Strong AWS expertise and the ability to lead multiple security initiatives across IaaS, SaaS, and internally developed applications.

• Extensive experience with security architecture and threat modeling for complex enterprise applications

• Strong knowledge of STRIDE, attack trees, abuse cases, data flow analysis, and trust boundary analysis

• Hands on experience evaluating security risks in AI, machine learning, and agentic AI applications

• Advanced AWS knowledge across IAM, networking, compute, storage, RDS, messaging, serverless, ECS/EKS, CI/CD, and AI/ML services

• Strong understanding of application security, API security, IAM, authentication, authorization, encryption, key management, and data protection

• Experience translating identified threats into practical security controls and remediation recommendations

• Knowledge of DevSecOps, pipeline security, container security, infrastructure security, SIEM, CSPM, and CWPP solutions

• Familiarity with security frameworks and standards such as NIST, OWASP, CIS, FedRAMP, ISO, and SOX

• Experience with resilient, highly available, API driven, stateless, and integrated cloud or SaaS environments

• Ability to lead multiple initiatives and communicate effectively with technical and business stakeholders

• Preferred certifications include CISSP, CCSP, AWS Professional or Specialty certifications, or equivalent credentials

Ref: #404-IT Pittsburgh

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.