Hybrid Cloud Security Architect AWS IAM Lead

Warner Bros. Entertainment; Silver Spring (MD); Hybrid; USD 133,000 - 247,000; Full time

Job summary

Warner Bros. Discovery is seeking a Cloud Security Architect to lead secure cloud designs across AWS, Azure and GCP, partnering with engineering and product teams to embed security into architectures and CI/CD pipelines.

The role requires hands-on expertise, strong scripting skills, and a focus on least-privilege access, data protection, and secure network design. Hybrid schedule with 3 days onsite in DC or Silver Spring.

Qualifications

• Bachelor’s degree in computer science, information security, or related field; 6–8 years of strong experience.
• Hands-on AWS cloud architecture with Azure exposure; GCP a plus.
• Ability to automate security processes and integrate security into CI/CD.
• Proficient in scripting (Python, Go, or Node.js).
• Strong IP networking knowledge in cloud contexts.
• Experience with Terraform, CloudFormation or Ansible, and cloud security tooling.

Responsibilities

• Serve as Cloud Security SME for Warner Bros. Discovery’s InfoSec.
• Identify cloud security risks across AWS, Azure, and GCP and lead mitigations.
• Produce clear architecture and security design artifacts for implementation.
• Collaborate with product and platform engineering to secure architectures.
• Provide hands-on IAM guidance for least-privilege access.
• Review AI/ML workloads for secure design patterns and data protection.
• Evaluate cloud security vendors and tools; PV assessments.
• Mentor junior team members and maintain security docs.
• Stay current with emerging cloud threats and tooling.

Skills

Cloud security

AWS

Azure

GCP

IAM

Automation

CI/CD

Networking

Kubernetes

Programming

Education

Bachelor’s degree in Computer Science or related

Tools

Terraform

CloudFormation

Ansible

AWS CLI

Kubernetes

GitHub

Job description

Warner Bros. Discovery is seeking a Cloud Security Architect to lead secure cloud designs across AWS, Azure and GCP, partnering with engineering and product teams to embed security into architectures and CI/CD pipelines.

The role requires hands-on expertise, strong scripting skills, and a focus on least-privilege access, data protection, and secure network design. Hybrid schedule with 3 days onsite in DC or Silver Spring.