Cloud Security Architect

System One, Inc.; Knoxville (TN); On-site; USD 130,000 - 190,000; Full time

Job summary

System One, Inc. is seeking a Cloud Security Architect to lead security architecture and threat modeling for complex enterprise applications, with a strong focus on AI and agentic AI solutions.

You will evaluate applications, APIs, cloud platforms, SaaS solutions, and distributed systems to identify security risks and define effective controls, while working with product owners, engineering, and security teams. On-site role in Knoxville, TN; no remote work.

Qualifications

• Experience leading security architecture for complex enterprise apps.
• Strong knowledge of STRIDE, threat modeling, data flow analysis.
• Proficient in API security and identity/access management.
• Hands-on security assessment for AI/ML and agentic AI.
• Experience with DevSecOps, CI/CD security, CWPP and CSPM.
• Familiarity with NIST, OWASP, CIS, FedRAMP, ISO, SOX.

Skills

AWS architecture

Threat modeling

API security

IAM & encryption

DevSecOps & CI/CD security

Security standards

Job description

Cloud Security Architect

Lead security architecture and threat modeling for complex enterprise applications, with a strong focus on AI and agentic AI solutions.

Evaluate applications, APIs, cloud platforms, SaaS solutions, and distributed systems to identify security risks and define effective controls.

Work with product owners, enterprise architecture, engineering, and security teams to protect sensitive data, strengthen identity and access controls, secure cloud environments, and support compliance with enterprise policies and industry standards.

no C2C with 3rd parties - W2 candidates only.

Must be able to work on site 5 days a week - no remote work.

Qualifications

• Strong AWS expertise and the ability to lead multiple security initiatives across IaaS, SaaS, and internally developed applications.
• Extensive experience with security architecture and threat modeling for complex enterprise applications
• Strong knowledge of STRIDE, attack trees, abuse cases, data flow analysis, and trust boundary analysis
• Hands on experience evaluating security risks in AI, machine learning, and agentic AI applications
• Advanced AWS knowledge across IAM, networking, compute, storage, RDS, messaging, serverless, ECS/EKS, CI/CD, and AI/ML services
• Strong understanding of application security, API security, IAM, authentication, authorization, encryption, key management, and data protection
• Experience translating identified threats into practical security controls and remediation recommendations
• Knowledge of DevSecOps, pipeline security, container security, infrastructure security, SIEM, CSPM, and CWPP solutions
• Familiarity with security frameworks and standards such as NIST, OWASP, CIS, FedRAMP, ISO, and SOX
• Experience with resilient, highly available, API driven, stateless, and integrated cloud or SaaS environments
• Ability to lead multiple initiatives and communicate effectively with technical and business stakeholders
• Preferred certifications include CISSP, CCSP, AWS Professional or Specialty certifications, or equivalent credentials