Cloud Security SME CNAPP & Cloud Architecture

Estuate, Inc.; Houston (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Estuate, Inc. seeks a Sr. Cloud Security SME to design cloud security architecture and deploy CNAPP platforms across a multi-cloud enterprise. You will guide cross-functional teams in a large-scale environment and oversee security controls in AWS, GCP, and other cloud services.

The role emphasizes hands-on CNAPP deployment, policy governance, and executive-focused documentation to drive secure cloud initiatives across business units.

Qualifications

• 7+ years in cloud security; 3+ years in SME/architecture roles.
• Hands-on Upwind, Wiz, or Prisma Cloud deployment experience.
• Deep expertise in AWS (IAM, GuardDuty, S3, CloudTrail) and Google Cloud Platform (SCC, VPC Service Controls).
• Strong CSPM and agentless/eBPF sensor deployment experience.
• Familiarity with NERC CIP, NIST 800-53, or CIS controls.
• Experience producing executive-level architecture and governance documentation.

Responsibilities

• Design cloud security architecture across AWS, GCP, and Azure.
• Deploy and manage CNAPP platforms and RBAC/SSO configurations.
• Govern S3 bucket security and IAM least-privilege models.
• Integrate CNAPP with CrowdStrike, Tenable, and SIEM/SOAR tooling.
• Drive vulnerability prioritization by aligning runtime context with findings.
• Define and maintain RBAC frameworks and governance workflows.
• Mentor security teams across VM, App Sec, SOC, and BU.

Skills

Cloud security

Architecture leadership

CNAPP deployment

AWS

Google Cloud Platform

CSPM

RBAC/SSO config

Executive documentation

Education

CCSP / CISSP / AWS Security Specialty

Job description

Hi,

We have a very urgent requirement for Cloud Security SME – CNAPP & Cloud Architecture

Please let me know if you or someone you know is interested.

Please see the job details below.

Job Title:

Cloud Security SME – CNAPP & Cloud Architecture

Location:

Houston, TX or Juno Beach, FL

Role Summary

Senior security professional to design cloud security architecture, deploy and operationalize CNAPP platforms, and guide cross-functional teams across a multi-cloud enterprise environment.

Key Responsibilities

• Design and implement cloud security architecture across AWS, Google Cloud Platform and Azure
• Deploy and manage CNAPP platforms (Upwind) including sensors, cloud collectors, CSPM policies, and RBAC/SSO configuration
• Govern S3 bucket security, IAM least-privilege models, and Google Cloud Platform security controls
• Integrate CNAPP with CrowdStrike, Tenable, and SIEM/SOAR tooling
• Drive vulnerability prioritization by correlating runtime context with scan findings
• Define and maintain RBAC frameworks and access governance workflows (e.g., ServiceNow)
• Mentor and guide VM, App Sec, SOC, and BU security teams

Required Qualifications

• 7+ years in cloud security; 3+ years in an SME or architecture role
• Hands-on Upwind, Wiz, or Prisma Cloud deployment experience
• Deep expertise in AWS (IAM, GuardDuty, S3, CloudTrail) and Google Cloud Platform (SCC, VPC Service Controls)
• Strong CSPM and agentless/eBPF sensor deployment experience
• Familiarity with NERC CIP, NIST 800-53, or CIS compliance frameworks
• Experience producing executive-level architecture and governance documentation

Preferred

• Certifications: CCSP, AWS Security Specialty, CISSP
• Exposure to ServiceNow VRM, AI-assisted security workflows, or lab/POC environment buildouts

Kakuli | Estuate, Inc.

e

P :

830 Hillview Ct, #280, Milpitas, CA 95035