Cloud Security Architect

Warner Bros. Discovery; Silver Spring (MD); Ibrido; USD 133.000 - 247.000; Tempo pieno

Descrizione del lavoro

Warner Bros. Discovery, Inc. is seeking a Cloud Security Architect to lead security for public cloud deployments across AWS, Azure, and GCP. Hybrid work schedule (3 days onsite) in the DC/Silver Spring area, partnering with engineering and product teams to embed security into architectures, platforms and workflows.

You will mentor junior staff, create actionable security artifacts, and stay current on threats and tooling to strengthen the organization’s cloud posture.

Competenze

• Bachelor’s degree in computer science, information security or related field, or equivalent practical experience with 6-8 years of strong experience.
• Hands-on experience securing AWS-based cloud environments, with Azure exposure; GCP familiarity is a plus.
• Ability to automate security processes and integrate with CI/CD pipelines and development workflows.
• Excellent communication, collaboration with cross-functional teams, and ability to manage multiple priorities.

Mansioni

• Serve as Cloud Security SME for Warner Bros. Discovery’s Information Security organization.
• Identify cloud security risks across AWS, Azure, and GCP and lead mitigations.
• Design and produce security design artifacts to enable secure implementations.
• Collaborate with product and platform teams to secure networks, compute, containers, and serverless.
• Provide IAM guidance to enforce least-privilege access across cloud environments.
• Review AI/ML workloads for secure design patterns and data protection.
• Engage with cloud providers to evaluate features and roadmaps.
• Evaluate CSPM/CNAPP tools and perform proof-of-value assessments.
• Mentor junior cloud security team members and share knowledge.
• Develop cloud security documentation, standards, and runbooks.

Conoscenze

Cloud security architecture

AWS security

Azure security

GCP knowledge

IAM best practices

IaC tooling

CI/CD security

Kubernetes

Networking in cloud

Scripting automation

Formazione

Bachelor's in CS or Info Sec or related field

Strumenti

Terraform

CloudFormation

Ansible

GitHub Actions

AWS CLI

Azure CLI

Descrizione del lavoro

Storytelling is, and will always be, the heart of what we do at Skydance.

Our vision is to build a thriving entertainment ecosystem where stories and worlds are imagined, brought to life and experienced. We create for every age and audience, anchored by the strength of our content and experiences and the depth of our connection with fans. We are creator-first, audience-focused, tech-forward, globally scaled.

Here, you’ll work with talented teams that move fast, think boldly and collaborate with purpose to deliver results. We aim high, champion the best ideas and win together, earning the trust of our employees, creators, partners and audiences every day.

If you’re energized by the opportunity to help build the next‑generation global media and entertainment company powered by creativity and technology, we’d be thrilled to welcome you aboard. LET’S GO!

ㅤ

Must work a hybrid schedule (3 days onsite) out of our DC or Silver Spring office.

The Cloud Security Architect is a hands‑on security leader with deep expertise in designing, securing, and assessing enterprise‑scale public cloud environments. As a lead member of the Warner Bros. Discovery (WBD) Cloud Security team, this role partners closely with engineering and product teams to embed security into cloud architectures, platforms, and workflows across AWS, with a working knowledge and experience of Azure and GCP in case of emergency support/maintenance is required.

Role Responsibilities

• Serve as a Cloud Security Subject Matter Expert (SME) for Warner Bros. Discovery’s Information Security organization, providing authoritative guidance on public cloud security architecture and engineering.
• Proactively identify cloud security risks across AWS, Azure, and GCP environments, design pragmatic mitigation strategies, and lead or influence implementation efforts in partnership with engineering teams.
• Design and produce clear, actionable architecture and security design artifacts to enable the Cloud Security team to implement solutions, whether developed in-house or delivered via third‑party vendors.
• Partner closely with product and platform engineering teams to design, review, and validate secure network, compute, container, and serverless architectures.
• Provide hands‑on IAM guidance, including policy design and review, to ensure least‑privilege access models consistently implemented across cloud environments.
• Review cloud architecture and AI/ML workloads to advise development teams on secure design patterns, data protection, identity controls, and potential security gaps prior to deployment.
• Engage with public cloud service providers to evaluate and influence security features, roadmap capabilities, and best‑practice implementations.
• Evaluate cloud security vendors and tools (including CSPM/CNAPP platforms), conduct proof‑of‑value assessments, and provide recommendations based on technical fit and risk reduction.
• Mentor and support junior cloud security team members through technical guidance, design reviews, and knowledge sharing.
• Develop and maintain cloud security documentation, including architectural standards, reference designs, configuration guidelines, and operational processes.
• Collaborate with senior leadership and cross‑functional stakeholders to assess current and future cloud security requirements and align solutions with business and technology strategy.
• Continuously stay current with emerging cloud threats, attack techniques, and security tooling, applying this knowledge to improve WBD’s cloud security posture.

Qualifications & Experience Required

• Bachelor’s degree in computer science, Information Security, or a related technical discipline, or equivalent practical experience with 6-8 years of strong experience.
• Strong hands‑on understanding of public cloud infrastructure components and architectures, with demonstrated ability to identify and mitigate security risks in decentralized, hybrid, and multi‑account cloud environments.
• Solid understanding of information security principles, risk management, and compliance frameworks, and how they apply to large‑scale public cloud platforms.
• Proven experience designing, building, and securing AWS‑based cloud environments, with meaningful hands‑on experience in Azure; exposure to GCP is a plus.
• Ability to automate security processes end‑to‑end and collaborate closely with cloud engineering and product teams to integrate security into CI/CD pipelines and development workflows.
• Proficiency in at least one modern scripting or programming language (e.g., Python, Go, or Node.js) for automation, tooling, and integrations.
• Strong foundational knowledge of IP networking concepts, including routing, VPNs, DNS, and network segmentation in cloud environments.
• Hands‑on experience in several of the following areas:
  • Cloud security administration across AWS, Azure, and/or GCP
  • Designing and securing serverless applications and managed cloud services
  • Infrastructure‑as‑Code tools such as Terraform, CloudFormation, or Ansible
  • Command‑line tooling (Bash, PowerShell, AWS CLI, Azure CLI)
  • Container and orchestration technologies (Docker, Kubernetes)
  • Cloud network architecture and VPC/VNet engineering
  • Cloud‑native security services (e.g., AWS GuardDuty, Azure Defender for Cloud, GCP Security Command Center, WAF)
  • Source control and pipeline security (e.g., GitHub Security features)
• Excellent verbal and written communication skills, with the ability to clearly articulate complex technical concepts to both technical and non‑technical audiences.
• Demonstrated ability to manage multiple priorities and remain effective in a fast‑paced, rapidly changing environment.
• Strong curiosity and commitment to continuous learning, with a desire to stay current on emerging cloud security threats, tools, and best practices.

The Nice to Haves

• One or more current cloud provider certifications demonstrating advanced knowledge of cloud architecture and security, such as:
  • AWS: Solutions Architect (Associate or Professional), Security – Specialty
  • Azure: Azure Fundamentals, Azure Solutions Architect Expert
  • GCP: Associate Cloud Engineer, Professional Cloud Security Engineer
• Industry‑recognized security certifications reflecting a strong security foundation, such as CISSP or CompTIA Security+.
• Hands‑on experience with cloud security platforms and tooling, including CSPM/CNAPP solutions (e.g., Wiz), SIEM and observability tools (e.g., Splunk), and cloud risk or asset management platforms (e.g., Brinqa).

Experience integrating security tooling and workflows with engineering collaboration platforms such as Slack, Jira, and CI/CD pipelines.

About Skydance

Skydance is a next‑generation global media and entertainment company, comprised of three business segments: Studios, Direct‑to‑Consumer, and TV Media. Skydance's portfolio unites legendary brands, including Paramount, Warner Bros., HBO and HBO Max, Paramount+, Pluto TV, CBS, CNN, CBS Sports, TNT Sports, Nickelodeon, Cartoon Network, MTV, Food Network, BET, HGTV, and Comedy Central.

Some Important Details

We embrace the opportunity to build a workforce that reflects a wide array of perspectives, backgrounds and experiences. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit. In line with the laws of the country or region in which the role is based, this includes consideration without regard to race, color, ethnicity, national origin, citizenship status, religion or belief, sex, gender, gender identity or expression, sexual orientation, age, marital status, pregnancy, parenthood, physical or mental disability, genetic information, military or protected veteran status, union status or any other category protected by applicable law.

Hiring Salary Range

Hiring Salary Range: $133,140.00 - $247,260.00 per yearIn compliance with local law, we are disclosing compensation, or a range thereof, for roles where legally required. Actual salaries will vary based on a variety of job‑related factors, including but not limited to geographic location, external market data, internal equity, skill set, experience, training, education, and/or performance. Base pay is just one component of our total compensation package. Other rewards may include annual bonuses, short‑and‑long‑term incentives, and program‑specific awards. In addition, Warner Bros. Discovery provides a variety of benefits to employees, including health insurance coverage, an employee wellness program, life and disability insurance, a retirement savings plan, paid holidays and sick time and vacation.