IT Security Architect

Quanta Services, Inc.; Houston (TX); On-site; USD 150,000 - 210,000; Full time

Job summary

Quanta Services, Inc. is seeking an IT Security Architect to join the IT Security team in a senior hands-on role focused on securing the organization's multi-cloud footprint during a cloud-first transformation across 100+ operating companies.

The Architect will design secure cloud architectures and embed with cloud and data teams to build and harden secure solutions on AWS and Azure, delivering secure-by-design guidance and reference implementations.

Qualifications

• Bachelor's degree in CS, cyber security, or related field or equivalent cloud security experience.
• 7+ years in IT with cloud and application development.
• 5+ years in security with hands-on AWS and Azure security engineering.
• Experience building solutions on AWS and Azure (multi-cloud).
• Hands-on development of agentic and AI-driven solutions on cloud platforms.

Responsibilities

• Design secure cloud architectures and embed with cloud, data, and application teams to build and harden secure solutions on AWS and Azure.
• Create secure reference architectures and patterns for cloud workloads, including landing zones and identity management.
• Architect and secure AI/LLM workloads with secure integration patterns and data protection.
• Provide security architecture and hands-on engineering for data-platform workloads, focusing on Databricks Unity Catalog and access governance.
• Build automated infrastructure-as-code and reference implementations for adoption by engineering teams.
• Develop patterns for internet-exposed workloads with WAF, gateways, and private connectivity.
• Collaborate with enterprise security architecture on threat modeling and standards.
• Mentor cloud/engineering teams and communicate security posture to leadership.
• Adhere to internal standards and procedures.

Skills

Cloud security engineering

AWS security

Azure security

Security architecture

Hands-on implementation

Leadership/mentorship

Education

Bachelor's degree in Computer Science or related

Master's degree in Computer Science or related (preferred)

Tools

Databricks security

Wiz

Cortex Cloud

CrowdStrike

SIEM

Job description

About Us

Every moment of every day, people around the world rely on the energy they access through infrastructure built by Quanta. Comprising the largest skilled-labor force in North America, our employees are highly skilled and innovative, continually working to connect people and power. We’re building the infrastructure that supports the energy transition, and there are more opportunities than ever to be part of our team. Join us and build your career building a brighter future.

Imagine what you could do here. We encourage, inspire, and support our people to seize opportunities in our corporate office and with hundreds of our operating companies worldwide that provide solutions for the utility, renewable energy, electric power, industrial, and communications industries.

Quanta actively promotes and maintains a culture of belonging where all employees can be themselves, live their values, and find opportunities to succeed. When you join our team, you join a dynamic organization in which career development is encouraged, excellence is rewarded, and diversity is prized. Come find out how our people power modern life.

About this Role

Quanta Services is seeking an IT Security Architect to join our IT Security team, reporting to the Director, IT Security. This is a senior, hands-on architecture role focused on securing the organization's multi-cloud footprint as Quanta executes a cloud-first transformation across 100+ operating companies. The role blends security architecture with forward-deployed engineering: the Architect both designs secure cloud architectures and embeds directly with cloud, data, and application teams to build and harden secure solutions — including agentic and AI-driven workloads on AWS and Microsoft Azure.

The Architect brings deep, current cloud security engineering expertise and is expected to produce both secure-by-design guidance and working reference implementations. This role complements the broader security architecture function: partnering with the enterprise security architecture team on threat-modeling methodology, framework governance, and cross-OpCo review standards, while providing the deep cloud-platform and data-platform engineering capability to turn those standards into deployed, defensible architectures.

What You'll Do

• Combine security architecture with forward-deployed engineering: design secure cloud architectures and embed with cloud, data, and application teams to build and harden secure solutions on AWS and Azure;
• Design and implement secure reference architectures and secure-by-design patterns for cloud workloads, including landing zones, network segmentation, identity, secrets management, and egress control;
• Architect and secure agentic and AI/LLM-driven workloads, including secure integration patterns, API and tool/MCP security, data protection and guardrails for AI services on AWS and Azure;
• Provide security architecture and hands-on engineering for data-platform workloads, with particular focus on Databricks (Unity Catalog, workspace/network isolation, access governance, and secure app/endpoint exposure);
• Build working reference implementations, automation, and infrastructure-as-code that engineering teams can adopt directly, rather than design documents alone;
• Architect secure patterns for internet-exposed cloud workloads, including WAF, application gateway, private connectivity, and egress controls;
• Partner with the enterprise security architecture function to apply threat models, control baselines, and review standards to cloud and data-platform designs;
• Provide technical guidance and mentorship to cloud and engineering teams, and communicate cloud security risk and posture to senior leadership; and
• Adhere to internal standards, policies, and procedures, and perform other duties as assigned.

What You'll Bring

Required Education and Experience

• Bachelor's degree in Computer Science, Cyber Security, or a related field, or commensurate experience in cloud security architecture and engineering;
• 7 or more years of relevant IT experience in cloud and application development;
• 5 or more years devoted specifically to security, with deep, hands-on AWS security and Azure cloud security engineering experience;
• Demonstrated experience building and securing solutions on both AWS and Azure (not single-cloud); and
• Hands-on experience building applications or automation, including the ability to develop agentic and AI-driven solutions on AWS and/or Azure.

Preferred Education and Experience

• Master's degree in Computer Science, Cyber Security, or a related field preferred;
• Hands-on Databricks security experience (Unity Catalog, network isolation, access governance, Databricks Apps exposure) preferred;
• Forward-deployed and embedded engineering experience working directly inside delivery teams preferred;
• Experience with CNAPP/CSPM tooling (e.g., Wiz or Cortex Cloud), EDR/XDR (e.g., CrowdStrike), and modern SIEM preferred; and
• Experience in a large, federated, or multi-business-unit enterprise a plus.

Licenses / Certifications

Required: N/A

Preferred: Microsoft Azure Security Engineer Associate (AZ-500) — strongly preferred; AWS Certified Security – Specialty — strongly preferred (or required within an agreed timeframe of hire); CISSP or CCSP — preferred; Databricks or data‑platform certification — a plus

Supervisory Responsibilities

N/A

Travel Requirements

Travels: No

Percent of time: N/A

Overnight required: No

Physical Demands

Stationary Position: Frequently

Pushing/Pulling/Reaching: Seldom

Climb: N/A

Kneel: N/A

Grab: N/A

Bend: N/A

Lift/carry over: Less than 10 LBS

Vision: Constantly

Hearing: Frequently

Working Conditions

Wet or Humid: N/A

Working near or on moving mechanical parts: N/A

Working near or on heavy machinery: N/A

Working in high places: N/A

Exposed to fumes or airborne particles: N/A

Exposed to toxic or caustic chemicals: N/A

Frequency of working in outdoor weather conditions: N/A

Work with Electricity: N/A

Work with explosives: N/A

Work on or near a source of radiation: N/A

Loud noise conditions (above 87dB): N/A

Other Environmental Factors including weather conditions: N/A

Equal Opportunity Employer

All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, national origin or ancestry, sex (including gender, pregnancy, sexual orientation, and/or gender identity), age, disability, genetic information, veteran status, and/or any other basis protected by applicable federal, state or local law.We are an Equal Opportunity Employer, including disability and protected veteran status. We prohibit all types of discrimination and are committed to providing access and equal opportunity for individuals with disabilities. For additional information or if reasonable accommodation is needed to participate in the job application, interview, or hiring processes or to perform the essential functions of a position, please contact us the Company’s Human Resources department.