Cloud Security Architect - Zero-Trust & IAM Leader

Flint Hills Resources; Lisle (IL); On-site; USD 175,000 - 205,000; Full time

Job summary

Koch is seeking an accomplished Cloud Security Architect to lead security for hybrid and multi-cloud environments. The role focuses on secure-by-design cloud architectures, identity governance, and integrated security controls across pipelines and deployments.

You will partner with engineering teams to implement Zero Trust, threat modeling, and security patterns, ensuring scalable protection while meeting regulatory demands and business risk tolerance.

Qualifications

• 8+ years in cybersecurity with cloud focus
• Experience securing IaaS and PaaS in hybrid/multi-cloud
• Hands-on with IaC and automated deployments
• Strong knowledge of IAM and Zero Trust
• Threat modeling and secure design with DevSecOps
• Ability to translate regulatory requirements into scalable security patterns

Responsibilities

• Define and evolve cloud security architectures and guardrails
• Maintain security standards for cloud-native services and serverless workloads
• Embed security into CI/CD pipelines and platform capabilities
• Provide architectural guidance and threat modeling for teams
• Design identity and access architectures with least-privilege
• Collaborate with Security Operations for detection, response and recovery
• Advise on security trade-offs and best practices
• Monitor evolving cloud security threats and update guidance

Skills

Cloud security

IAM

Zero Trust

DevSecOps

Infrastructure as Code

CI/CD

Threat modeling

Security architecture

Tools

Cloud platforms

Job description

Koch is seeking an accomplished Cloud Security Architect to lead security for hybrid and multi-cloud environments. The role focuses on secure-by-design cloud architectures, identity governance, and integrated security controls across pipelines and deployments.

You will partner with engineering teams to implement Zero Trust, threat modeling, and security patterns, ensuring scalable protection while meeting regulatory demands and business risk tolerance.