Cloud Security Architect

Good co India; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Good co India is seeking a senior cloud security architect to design and implement secure, scalable cloud architectures across AWS, Azure, and GCP. You will define security strategies, enforce IAM/RBAC and Zero Trust, and secure data, networks, and applications while aligning with regulatory standards.

You will drive threat modelling, encryption, key management, and secure CI/CD integration, coordinating with engineers and compliance teams to strengthen the organisation's security posture.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.
• 5 to 10 years of experience in cybersecurity, cloud engineering, infrastructure security, or information security, including hands-on cloud security architecture experience.
• Strong expertise in at least one major cloud platform: AWS, Azure, or GCP; multi-cloud experience is a plus.
• In-depth knowledge of IAM, network security, encryption, key management, secrets management, Zero Trust, and cloud-native security services.
• Practical experience with cloud security tools, CSPM solutions, SIEM platforms, vulnerability management, and incident response.
• Proficiency with Infrastructure as Code tools (Terraform, CloudFormation), scripting (Python, Bash), and DevSecOps practices.
• Understanding of container security, Docker, Kubernetes, API security, and CI/CD protection.
• Knowledge of ISO 27001, NIST, CIS Benchmarks, SOC 2, and data protection requirements.
• Strong threat modelling, risk assessment, security architecture reviews, and control implementation.
• Excellent analytical, problem-solving, and stakeholder-management skills.

Responsibilities

• Design and implement secure, scalable cloud architectures across AWS, MS Azure, and GCP.
• Define cloud security strategies, policies, standards, and best practices aligned with regulations.
• Implement IAM, RBAC, MFA, and Zero Trust security principles.
• Secure cloud infrastructure, networks, workloads, containers, APIs, apps, and data with proper controls.
• Conduct cloud security assessments, threat modelling, vulnerability assessments, and reviews.
• Implement encryption, key management, secrets management, data protection, and secure backup/recovery.
• Integrate security controls into CI/CD and DevSecOps pipelines.
• Monitor cloud environments with SIEM, CSPM, and other tools to detect threats and coordinate remediation.
• Ensure compliance with ISO 27001, NIST, CIS Benchmarks, SOC 2, and regulatory requirements.
• Collaborate with engineers, DevOps, developers, compliance, and stakeholders to embed security in SDLC.
• Develop cloud security reference architectures, documentation, and incident response procedures.
• Evaluate emerging cloud security technologies and recommend improvements.

Skills

Cloud security

IAM & RBAC

Zero Trust

Threat modelling

DevSecOps

CI/CD security

Analytical thinking

Stakeholder management

Communication

Education

Bachelor's or Master's in CS/IT/Cybersecurity

Tools

Terraform

CloudFormation

Python

Bash

SIEM

CSPM

Docker

Kubernetes

Job description

Role & responsibilities

• Design and implement secure, scalable cloud architectures across AWS, Microsoft Azure, and Google Cloud Platform (GCP).


• Define cloud security strategies, policies, standards, and best practices aligned with business requirements and industry regulations.


• Implement Identity and Access Management (IAM), Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Zero Trust security principles.


• Secure cloud infrastructure, networks, workloads, containers, APIs, applications, and data through appropriate security controls.


• Conduct cloud security assessments, threat modelling, vulnerability assessments, and architecture reviews to identify and mitigate risks.


• Implement encryption, key management, secrets management, data protection, and secure backup and recovery solutions.


• Integrate security controls into CI/CD pipelines and DevSecOps workflows to enable continuous security validation.


• Monitor cloud environments using SIEM, CSPM, and other security tools to detect threats, investigate incidents, and coordinate remediation.


• Ensure compliance with security frameworks and standards such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and applicable regulatory requirements.


• Collaborate with cloud engineers, DevOps teams, application developers, compliance teams, and business stakeholders to embed security throughout the software development lifecycle.


• Develop cloud security reference architectures, technical documentation, security guidelines, and incident response procedures.


• Evaluate emerging cloud security technologies and recommend improvements to strengthen the organisation's security posture.

Preferred candidate profile

• Bachelor's or master's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.


• 5 to 10 years of experience in cybersecurity, cloud engineering, infrastructure security, or information security, including hands‑on cloud security architecture experience.


• Strong expertise in at least one major cloud platform: AWS, Microsoft Azure, or Google Cloud Platform; multi-cloud experience is an advantage.


• In-depth knowledge of IAM, network security, encryption, key management, secrets management, Zero Trust, and cloud-native security services.


• Practical experience with cloud security tools, CSPM solutions, SIEM platforms, vulnerability management, and incident response.


• Proficiency in Infrastructure as Code tools such as Terraform or CloudFormation, scripting languages such as Python or Bash, and DevSecOps practices.


• Understanding of container security, Docker, Kubernetes, API security, and CI/CD pipeline protection.


• Knowledge of security and compliance frameworks such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and relevant data protection requirements.


• Strong skills in threat modelling, risk assessment, security architecture reviews, and security control implementation.


• Excellent analytical, problem-solving, communication, and stakeholder-management skills.


• Ability to translate business and regulatory requirements into practical cloud security solutions.


• Preferred certifications: AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CCSP, or CISSP.