Director Cloud Security Architecture & Engineering

Breakthru Services Group, LLC; Linthicum (MD); On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Annual bonus

Job summary

Breakthru Beverage Group seeks an experienced Director of Cloud Security Architecture and Engineering to lead a hands-on team across AWS, Azure, and SaaS platforms. You will shape security strategy, implement Zero Trust, and drive secure cloud adoption in a fast-paced environment.

The role requires 12+ years in IT security, 5+ years in AWS architecture, and relevant certifications. Excellent collaboration with DevOps and security ops is essential.

Qualifications

• Bachelor's degree or equivalent in CS/IT.
• 12+ years IT security with 5+ years AWS architecture experience.
• AWS/Security certifications listed.
• Deep AWS-native and 3rd-party security tool experience.
• Strong knowledge of governance, IaC, encryption, networking, IAM.

Responsibilities

• Own and evolve enterprise cloud security architecture across AWS, SaaS, and hybrid environments.
• Lead design, implementation, and migration security for cloud workloads including Azure to AWS.
• Implement Zero Trust models and integrate with Zscaler, Splunk, BeyondTrust.

Skills

Cloud security architecture

Leadership

Automation scripting

Strong communication

Education

Bachelor's degree in CS/IT or equivalent

AWS Solutions Architect – Associate

AWS Security Specialty

CISSP

Tools

Splunk

Snowflake

S/4HANA

Job description

Job Description Summary:

We are seeking an experienced Director, Cloud Security Architecture and Engineering to serve as a hands-on leader, providing both strategic direction and active technical contribution. This role will lead and work alongside a cloud security architecture and engineering team, directly designing, implementing, and evolving a multi-cloud, hybrid security architecture across AWS, Azure, multiple SaaS providers, and operational technology environments Job Description: Job Responsibilities: Cloud Security Architecture and Engineering Own and evolve the enterprise cloud security architecture across AWS, SaaS platforms, hybrid infrastructure, applications, networking, and operational technologies, ensuring alignment with business strategy and risk tolerance. Define and implement AWS-native security architectures including identity, encryption, network segmentation, logging, detection, and governance capabilities, to enable secure and scalable cloud adoption. Support the re-architecture and migration of Azure workloads to AWS, ensuring security-by-design principles are embedded throughout the migration lifecycle. Design, implement and enforce Zero Trust security models to ensure protection of cloud and hybrid environments. Integration & Engineering Collaboration Integrate AWS with enterprise security platforms such as Zscaler, Splunk, and BeyondTrust to enable centralized visibility, control and response. Collaborate with DevOps and cloud infrastructure teams to embed security into DevOps pipelines, leveraging automation for vulnerability management, code scanning, configuration validation and continuous compliance. Support the establishment and oversee cloud identity and access management (IAM) strategies, including federation, least privilege, just in time access, identity governance, and Zero Trust principles. Integrate with multiple IdPs including Entra ID and SAP IAS. Governance, Risk and Compliance (GRC) Establish tailored governance, risk, and compliance (GRC) frameworks for cloud adoption, including policy-as-code and automated compliance monitoring aligned to industry standards and regulatory requirements. Develop templates, accelerators, and reusable security artifacts that improve delivery speed, consistency, and compliance across cloud initiatives for BBG. Monitor emerging cloud services, regulatory changes, and threat trends to proactively assess risk and advise leadership on security posture and mitigation strategies. Leadership, Delivery & Response Lead and develop cloud security architecture and engineering teams, setting technical direction, delivery priorities, and performance expectations. Provide architectural oversight and subject matter expertise for enterprise and cross-functional initiatives, ensuring security outcomes are consistently achieved. Own and evolve the cloud security tools, platforms, and services portfolio to maximize effectiveness and return on investment. Oversee cloud incident response and forensics capabilities, leveraging native cloud telemetry and SIEM integrations to enable rapid detection, investigation, and recovery. Deliver thought leadership through executive briefings, architecture reviews, and security workshops, influencing stakeholders and driving secure cloud transformation. Other duties, as assigned by the jobholder’s supervisor, may also be required.

Minimum Qualifications:

• Bachelor's degree in computer science, information systems, or information technology, or equivalent work experience.
• Minimum 12 years of IT Security experience, with 5 years focused on AWS architecture.
• AWS Solutions Architect – Associate Certification
• AWS Security Specialty
• CISSP Certification
• Deep expertise in AWS-native and third-party security tools
• Strong understanding of cloud governance, infrastructure as code (IaC), encryption, networking, and identity management.
• Strone experience with Snowflake and S/4HANA
• Hands-on scripting and automation (Python, Terraform)
• Strong experience with Splunk
• Experience with multi-cloud environments (AWS, Azure, M635)
• Strong writing and communication skills across technical and executive audiences
• Experience with leading and team management
• Ability to multi-task, work independently and/or within a team, pay attention to detail and meet deadlines.
• Utilize sound judgement, business acumen and problem-solving skills and ability to work in fast-paced, high-volume, team environment.
• Ability to work nights, weekends and holidays

Preferred Qualifications:

• AWS Solutions Architect – Professional Certification
• CCSP Certification
• Master’s degree

Physical Requirements:

While performing the duties of this job, the employee is required to remain in a stationary position at times; communicate, and operate a computer and telephone.

Competencies:

• May help coordinate the work of junior members of the team.
• Resolves issues which are often varied and non-routine.
• Undertakes analysis and investigation to solve issues.

This job description is only a summary of the typical functions of this position, not an exhaustive or comprehensive list of all possible job responsibilities, tasks and duties. Responsibilities, tasks, and duties of individual jobholders may vary from the above description.

$175K -$200k + 25% Annual Bonus - - Breakthru Beverage Group is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information and other legally protected characteristics.

The EEO is the Law poster is available here. If you need a reasonable accommodation because of a disability for any part of the employment process, please call [phone] and let us know the nature of your request and our contact information.

We’re driven to be the industry leader in every way, including how we treat our associates. Which is why we’ve built a people-centric, relationship-driven culture designed to maximize career advancement, a sense of belonging, and wellness. Focused on enhancing every aspect and phase of your career, the Breakthru experience includes our commitment to your growth, belonging, and wellness. Breakthru Beverage is a family-owned and operated company with operations across the U.S. and Canada, and more than $8 billion in annual sales driven by a team of 10,000 associates. We deliver world-renowned brands to the doorsteps of North America’s retail, bar and restaurant businesses.