Cloud Security Architect & DevSecOps Leader

CLA (CliftonLarsonAllen); Racine (WI); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health benefits

Dental plan

Vision plan

401k

Job summary

CLA (CliftonLarsonAllen) is seeking an Application Security Architect to join our growing technology team in the United States. The role bridges application security architecture, engineering, DevOps, and cloud security, leading secure design reviews and establishing a Cloud Security Posture Management practice.

The position focuses on governance, automation, and secure development workflows across CI/CD, GitHub Actions, IaC, containers, and cloud environments, with collaboration across risk,

Qualifications

• Experience leading or supporting secure design reviews for application, cloud, commercial, and hybrid solutions.
• Experience reviewing technical architecture, system interaction, and data-flow diagrams.
• Experience with application security architecture, cloud security, DevOps security, and security engineering.
• Knowledge of CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, and software supply-chain security.
• Experience assessing cloud permissions, secrets management, deployment architecture, container images, orchestration configurations, and cloud-native deployment patterns.
• Experience connecting technical security risks to practical controls and business outcomes.
• Ability to communicate technical risks and security requirements to both technical and non-technical stakeholders.
• Ability to build relationships and influence cross-functional teams without direct authority.

Responsibilities

• Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions.
• Document identified risks, required mitigations, risk owners, exceptions, and residual-risk decisions.
• Review system interaction diagrams and detailed logical, functional, physical, and data-flow diagrams.
• Identify trust boundaries, security boundaries, integration points, administrative interfaces, data stores, and external dependencies.
• Develop reusable security standards, assessment patterns, review templates, control baselines, and architectural guidance.
• Establish and build a Cloud Security Posture Management practice across governance and development teams.
• Assess cloud permissions, secrets management, deployment architecture, infrastructure as code, container images, orchestration configurations, and cloud-native deployment patterns.
• Identify opportunities to prevent configuration issues and policy violations before deployment through policy-as-code and automated guardrails.
• Provide technical security leadership across multiple teams and stakeholders.
• Connect code, pipeline, identity, integration, data, and cloud architecture risks to security controls and business outcomes.

Skills

Application security architecture

Cloud security

DevOps security

CI/CD pipelines

GitHub Actions

Communication with stakeholders

Education

Bachelor's degree

Tools

Azure cloud services

Software composition analysis (Black Duck Polaris)

Policy-as-code

Job description

CLA (CliftonLarsonAllen) is seeking an Application Security Architect to join our growing technology team in the United States. The role bridges application security architecture, engineering, DevOps, and cloud security, leading secure design reviews and establishing a Cloud Security Posture Management practice.

The position focuses on governance, automation, and secure development workflows across CI/CD, GitHub Actions, IaC, containers, and cloud environments, with collaboration across risk,