Cloud Security Architect - CNAPP & Multi-Cloud

Estuate, Inc.; Houston (TX); On-site; USD 150,000 - 180,000; Full time

Job summary

Estuate, Inc. is seeking a Senior Cloud Security SME to design cloud security architecture and deploy CNAPP platforms across a multi-cloud environment. The role requires hands-on experience with Upwind, Wiz, or Prisma Cloud and deep AWS/GCP security expertise.

The candidate will lead cross-functional teams, define RBAC and SSO configuration, and mentor VM, App Sec, and SOC security groups. This is an onsite, enterprise security-focused position with collaboration across the US.

Qualifications

• 7+ years in cloud security
• 3+ years in SME/architecture role
• Hands-on Upwind, Wiz, or Prisma Cloud deployment
• Deep expertise in AWS IAM, GuardDuty, S3, CloudTrail and Google Cloud Platform (SCC, VPC Service Controls)
• Strong CSPM and agentless/eBPF sensor deployment experience
• Familiarity with NERC CIP, NIST 800-53, or CIS compliance frameworks
• Experience producing executive-level architecture and governance documentation

Responsibilities

• Design and implement cloud security architecture across AWS, Google Cloud Platform and Azure
• Deploy and manage CNAPP platforms (Upwind) including sensors, cloud collectors, CSPM policies, and RBAC/SSO configuration
• Govern S3 bucket security, IAM least-privilege models, and Google Cloud Platform security controls
• Integrate CNAPP with CrowdStrike, Tenable, and SIEM/SOAR tooling
• Drive vulnerability prioritization by correlating runtime context with scan findings
• Define and maintain RBAC frameworks and access governance workflows (e.g., ServiceNow)
• Mentor and guide VM, App Sec, SOC, and BU security teams

Skills

Cloud security

Architecture design

Executive communication

Tools

Upwind

Wiz

Prisma Cloud

CrowdStrike

Tenable

SIEM/SOAR

ServiceNow

Job description

Estuate, Inc. is seeking a Senior Cloud Security SME to design cloud security architecture and deploy CNAPP platforms across a multi-cloud environment. The role requires hands-on experience with Upwind, Wiz, or Prisma Cloud and deep AWS/GCP security expertise.

The candidate will lead cross-functional teams, define RBAC and SSO configuration, and mentor VM, App Sec, and SOC security groups. This is an onsite, enterprise security-focused position with collaboration across the US.