Cloud Security Architect | DevSecOps & App Security

CliftonLarsonAllen LLP; Naples (FL); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) matching

Job summary

CLA is seeking an Application Security Architect to bridge security architecture with engineering, DevOps, and cloud security. You will lead secure design reviews, assess data flows, and identify controls to protect CLA's technology environment.

You will provide governance and automation support across CI/CD pipelines, GitHub Actions, IaC, containers, and cloud environments, establishing a Cloud Security Posture Management practice.

Qualifications

• Experience leading or supporting secure design reviews for application, cloud, commercial, and hybrid solutions.
• Experience reviewing technical architecture, system interaction, and data-flow diagrams.
• Experience with application security architecture, cloud security, DevOps security, and security engineering.
• Knowledge of CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, and software supply-chain security.
• Experience assessing cloud permissions, secrets management, deployment architecture, container images, orchestration configurations, and cloud-native deployment patterns.
• Experience connecting technical security risks to practical controls and business outcomes.
• Ability to communicate technical risks and security requirements to both technical and non-technical stakeholders.
• Ability to build relationships and influence cross-functional teams without direct authority.

Responsibilities

• Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions.
• Document identified risks, required mitigations, risk owners, exceptions, and residual-risk decisions.
• Review system interaction diagrams and data-flow diagrams.
• Identify trust boundaries, security boundaries, integration points, data stores, and external dependencies.
• Develop reusable security standards, assessment patterns, and architectural guidance.
• Establish a Cloud Security Posture Management practice aligning with automated development workflows.
• Assess cloud permissions, secrets management, deployment architecture, container images, and cloud-native deployment patterns.
• Identify opportunities to prevent config issues and policy violations through policy-as-code and guardrails.
• Provide technical security leadership across Development, Cloud, Platform, Product, Data, IT, Enterprise Architecture, and Risk teams.
• Connect code, pipeline, identity, integration, data, and cloud risks to practical controls and business outcomes.

Skills

Application security

Security architecture

Cloud security

DevOps security

CI/CD pipelines

GitHub Actions

Communication with stakeholders

Threat modeling

Risk identification

Education

Bachelor's degree

Tools

GitHub Actions

Azure

CloudFormation / IaC

Polaris / Black Duck

Job description

CLA is seeking an Application Security Architect to bridge security architecture with engineering, DevOps, and cloud security. You will lead secure design reviews, assess data flows, and identify controls to protect CLA's technology environment.

You will provide governance and automation support across CI/CD pipelines, GitHub Actions, IaC, containers, and cloud environments, establishing a Cloud Security Posture Management practice.