Cloud Security Architect - St. Louis, MO

Hubbell Lighting Inc; St. Louis (MO); On-site; USD 140,000 - 210,000; Full time

Job summary

Hubbell Incorporated is seeking a Cloud Security Architect to act as the embedded security authority within our software engineering team. This hands-on role focuses on securing cloud infrastructure, guiding security decisions, and enforcing best practices across our Azure-hosted environment.

You will review IaC (Terraform) and Kubernetes configurations, work with engineers to design secure solutions, and participate in SOC 2 activities.

Qualifications

• 8+ years in a DevOps/platform engineering/cloud infra role with security ownership.
• Hands-on experience securing Azure environments (Azure AD/Entra ID, IAM, network controls).
• Experience reviewing and hardening IaC (Terraform) for security and policy compliance.
• Knowledge of Kubernetes security in AKS/EKS, RBAC, network policies, secrets management.
• SOC 2 audit cycle participation, control mapping and evidence collection.
• Ability to translate security posture into RFP responses and compliance docs.

Responsibilities

• Define and champion security best practices across software solutions and SDLC, focusing on Azure infra.
• Review Terraform configurations to identify misconfigurations and ensure policy alignment.
• Establish and maintain security standards for Kubernetes environments (RBAC, segmentation, secrets).
• Review architecture decisions to identify and mitigate security risks early.
• Develop and maintain security guidelines, standards, and reference architectures for engineering.
• Act as in-house security expert for informed, security-conscious decisions.
• Lead RFP security questionnaires and maintain up-to-date documentation of security posture.

Skills

Cloud security

Azure security

Kubernetes security

Terraform / IaC security

SOC 2 audit experience

Engineer collaboration

Education

Bachelor’s degree in CS/Engineering or related field

Tools

Terraform

AKS / EKS security controls

OpenID / IAM concepts

Job description

Job Overview

We are looking for a Cloud Security Architect to serve as the embedded security authority within our software engineering team. This is a hands‑on technical role — not a compliance or audit seat. We’re looking for someone who has built and hardened real cloud infrastructure, understands how engineers think, and can help us make security decisions that are pragmatic and grounded in how our systems work.

Job Overview

We are looking for a Cloud Security Architect to serve as the embedded security authority within our software engineering team. This is a hands‑on technical role — not a compliance or audit seat. We’re looking for someone who has built and hardened real cloud infrastructure, understands how engineers think, and can help us make security decisions that are pragmatic and grounded in how our systems work.

A Day In The Life
Every Day At Hubbell Is Different And You’ll Contribute In Many Ways. On Any Given Day, You’ll Make a Difference By

Security Best Practices & Architecture Guidance

• Define and champion security best practices across our software solutions and development lifecycle, with a focus on our Azure-hosted infrastructure.
• Review Terraform configurations and infrastructure-as-code changes to identify security misconfigurations and ensure alignment with policy and compliance requirements.
• Establish and maintain security standards for our Kubernetes environments (AKS and EKS), including RBAC policies, network segmentation, secrets management, and container security.
• Review architecture and design decisions to identify and mitigate security risks early.
• Develop and maintain security guidelines, standards, and reference architectures for the engineering team.

Security Advisory & Decision Support

• Act as the in‑house security expert — available to help the team make well‑informed, security‑conscious decisions.
• Evaluate third‑party tools, vendors, and integrations from a security perspective.
• Provide guidance on threat modeling, risk assessment, and security trade‑offs.

Compliance & Standards Ownership

• Own and maintain our compliance posture in alignment with the standards and frameworks established by our external cybersecurity team.
• Participate in SOC 2 audit activities, including control execution, evidence collection, and direct engagement with auditors when needed.
• Proactively identify compliance gaps and drive remediation efforts in partnership with engineering leads.
• Serve as the primary liaison between the software team and the external cybersecurity organization.

RFP & Security Questionnaire Response

• Lead the completion of security questionnaires as part of the RFP and sales process.
• Maintain accurate, up‑to‑date documentation of our security posture to streamline future questionnaire responses.

What will help you thrive in this role?

Required

• 8+ years in a DevOps, platform engineering, or cloud infrastructure role with meaningful security ownership — or an equivalent blend of engineering and security experience.
• Hands‑on experience securing Azure environments, including Azure AD/Entra ID, IAM, and network security controls.
• Experience reviewing and hardening Terraform and other infrastructure‑as‑code for security misconfigurations and policy compliance.
• Working knowledge of Kubernetes security in managed environments (AKS and/or EKS), including RBAC, network policies, secrets management, and container image scanning.
• Participated in at least one SOC 2 audit cycle — familiar with control mapping, evidence collection, and working with auditors.
• Comfortable translating technical security posture into RFP questionnaire responses and compliance documentation.
• Proven ability to communicate with engineers at a peer level and with non‑technical stakeholders without losing either audience.
• Bachelor’s degree in computer science, engineering, or a related field.

Preferred

• Background in DevSecOps — integrating security tooling (Checkov, Mend, Checkmarx, or other SCA/SAST/DAST tooling) into CI/CD pipelines.
• Familiarity with AKS security controls, including Azure Policy for Kubernetes, Defender for Containers, and container image scanning via ACR
• AZ‑500 (Microsoft Azure Security Engineer) or similar cloud‑focused certification.
• Exposure to AWS security controls in addition to Azure.
• Familiarity with threat modeling and secure design review processes.

Hubbell Incorporated

Hubbell creates critical infrastructure solutions that power our customers, communities, people and the planet. Our company is strategically aligned around enabling grid modernization and electrification. As more products plug in to an aging grid, Hubbell solutions enable the transition to a more reliable, resilient and efficient energy infrastructure. Founded in 1888 our innovation has made us a leading global manufacturer of high quality electrical and utility solutions enabling customers to operate critical infrastructure reliably and efficiently.

The company operates in two segments. Hubbell Utility Solutions (HUS) enable the grid to conduct, communicate and control energy across utility applications and Hubbell Electrical Solutions (HES) are essential to managing power across a wide range of industries and applications. Our vertical market solutions can be applied to markets including Data Centers, Renewables, Commercial Buildings, Industrial, Telecom and Transportation. Supporting both of our business segments is our corporate and Hubbell Unified Business Solutions teams that provide consistent process, tools technologies across our businesses.

We are committed to operating sustainably and ethically while promoting an inclusive and supportive culture for our people to grow and develop in their careers. Our employees proudly work and serve our communities from our headquarters in Shelton, CT, across the United States and around the globe.

Hubbell Utility Solutions (HUS) enable the grid to conduct, communicate and control energy across utility applications. HUS provides the critical components that allow the grid to reliably transmit and distribute energy, as well as the communications and controls technologies to make the grid smarter and more flexible.

Hubbell Incorporated, its subsidiaries and affiliates, is an EO Employer AA: M/F/Veteran/Disability. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender identity or any other protected class.

The above summary of position responsibilities and requirements is not intended, and should not be construed, to be an exhaustive list of duties, skills, efforts, physical requirements, or working conditions associated with the position. It is intended to be an accurate reflection of those principal position elements essential for making decisions related to position performance, employee development, and compensation.