Hybrid Cloud Infrastructure Security Architect

TikTok; New York (NY); On-site; USD 112,000 - 162,000; Full time

Job summary

TikTok's Global Security Organization seeks a security architect to design and validate security controls across hybrid/multi-cloud environments. You will lead threat modeling, embed policy-as-code into CI/CD, and build scalable IaC to enforce baselines across data centers and cloud platforms.

The role requires hands-on experience with cloud security tooling, regulatory frameworks, and strong collaboration with engineering and operations teams.

Qualifications

• Security controls across Hybrid and Multi-Cloud environments.
• Experience with CSPM, CNAPP, CASB, DLP.
• Threat modeling and risk assessment methodologies.
• Automation of security control implementation and validation.
• Knowledge of NIST CSF, ISO 27001 and GDPR/SOX.
• Ability to work 5 days a week in office.

Responsibilities

• Own security architecture and control frameworks across data centers and multiple clouds.
• Implement defense-in-depth controls for infrastructure.
• Lead threat modeling and architecture reviews.
• Embed automated scanning, policy-as-code, and approval gates into CI/CD.
• Build scalable IaC frameworks to enforce security baselines.
• Partner with engineering, infrastructure, and business teams to shift security left.
• Drive control maturity through regular assessments and a roadmap focused on automation.
• Design and mature cloud network security controls including VPCs, micro-segmentation and firewall policies.

Skills

Security architecture

Cloud security

Threat modeling

Automation

CI/CD security

Regulatory compliance

Education

Master’s degree

Security certification (CISSP/CCSP/CCSK)

Tools

Kubernetes

Docker

OPA/Rego

Sentinel

Job description

TikTok's Global Security Organization seeks a security architect to design and validate security controls across hybrid/multi-cloud environments. You will lead threat modeling, embed policy-as-code into CI/CD, and build scalable IaC to enforce baselines across data centers and cloud platforms.

The role requires hands-on experience with cloud security tooling, regulatory frameworks, and strong collaboration with engineering and operations teams.