Lead Cloud Security Architect (GCP)

Cotiviti; Northern (KY); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Disability insurance

Life insurance

401(k) savings plan

Paid family leave

9 paid holidays

Paid Time Off (PTO)

Job summary

Cotiviti is seeking a Lead Cloud Security Architect to act as the principal security advisor for cloud infrastructure, with a focus on Google Cloud Platform. You will own security design decisions, evaluate architectures for vulnerabilities, and guide teams on secure implementations across clouds.

You will design critical controls, conduct threat modeling, validate configurations, and serve as the trusted resource across development lifecycles, communicating risks clearly to technical and

Qualifications

• 8+ years of professional security architecture or cloud infra engineering.
• Bachelor’s degree in computer science, information security, or related field.
• Expert knowledge of Google Cloud Platform security services and best practices.
• Ability to explain trade-offs to technical and non-technical audiences.
• Experience with IaC tools (Terraform) and cloud security practices.
• Cloud security certification (Google Cloud Professional Cloud Security Engineer or CISSP).

Responsibilities

• Design security architecture for cloud workloads on Google Cloud Platform.
• Create security design documents and decision logs for critical cloud security decisions.
• Partner with engineering and operations to implement cloud security controls.
• Validate configurations against security policies and cloud best practices.
• Ensure alignment with cloud security best practices and applicable compliance requirements.
• Make decisions on critical security controls and document trade-offs between security, cost, and speed.
• Create security guidelines, runbooks, and training for development and operations teams on cloud security.
• Review architecture designs and cloud infrastructure configurations for security risks.
• Conduct threat modeling for high-risk cloud workloads and recommend mitigations.
• Serve as the trusted security advisor to engineering, operations, and leadership on cloud security matters.
• Communicate security decisions and risks clearly to technical and non-technical audiences.
• Complete all responsibilities as outlined in the annual performance review and/or goal setting.
• Complete all special projects and other duties as assigned.
• Must be able to perform duties with or without reasonable accommodation.

Skills

Security architecture

Cloud security

Terraform

Decision making

Communication

Education

Bachelor's degree in CS/InfoSec or related

Tools

Terraform

Job description

Overview

The Lead Cloud Security Architect is the principal security advisor for cloud infrastructure, with primary focus on Google Cloud Platform. You own security design decisions, evaluate architecture for vulnerabilities, and guide teams on implementing secure infrastructure across cloud platforms. You work with engineering teams, cloud architects, and leadership to ensure systems meet security and compliance standards while delivering on timeline. The role requires both strategic thinking and tactical execution. You will design critical security controls, conduct threat modeling, validate configurations, and serve as the trusted resource teams turn to for security guidance throughout the development lifecycle.

Responsibilities

• Design security architecture for cloud workloads on Google Cloud Platform
• Create security design documents and decision logs for critical cloud security decisions.
• Partner with engineering and operations teams to implement cloud security services and controls.
• Validate configurations against organizational security policies and cloud platform best practices.
• Ensure alignment with cloud security best practices and applicable compliance requirements.
• Make decisions on critical security controls and document trade-offs between security, cost, and speed.
• Create security guidelines, runbooks, and training for development and operations teams on cloud security.
• Review architecture designs and cloud infrastructure configurations for security risks.
• Conduct threat modeling for high-risk cloud workloads and recommend mitigations.
• Serve as the trusted security advisor to engineering, operations, and leadership teams on cloud security matters.
• Communicate security decisions and risks clearly to both technical and non-technical audiences.
• Complete all responsibilities as outlined in the annual performance review and/or goal setting.
• Complete all special projects and other duties as assigned.
• Must be able to perform duties with or without reasonable accommodation.

This job description is intended to describe the general nature and level of work being performed and is not to be construed as an exhaustive list of responsibilities, duties and skills required. This job description does not constitute an employment agreement and is subject to change as the needs of Cotiviti and requirements of the job change.

Qualifications

• 8+ years of professional security architecture or cloud infrastructure engineering experience
• Bachelor’s degree in computer science, Information Security, or related field
• Deep knowledge of Google Cloud Platform security services and best practices, with openness to other cloud platforms
• Ability to make security decisions and explain trade-offs to technical and non-technical audiences
• Experience with infrastructure-as-code tools (Terraform or similar) and cloud security practices
• Cloud security certification (Google Cloud Professional Cloud Security Engineer, CISSP, or equivalent)

Cognitive / Mental Requirements

• Security judgment—ability to evaluate risk and make sound recommendations
• Communication and influence—ability to present recommendations to both technical and executive audiences
• Problem-solving—ability to break down security requirements into actionable steps
• Collaboration—willingness to work across teams and balance competing priorities
• Ownership—accountability for security decisions and implementation
• Continuous learning—comfort staying current with new cloud services and security practices

Physical Requirements and Working Conditions

• Remaining in a stationary position for extended periods
• Repeating motions that may include wrists, hands, and fingers
• Must be able to provide a dedicated, secure work area.
• Must be able to provide high-speed internet access / connectivity and office setup and maintenance.

Base compensation ranges from $140,000 to $170,000 per year. Specific offers are determined by various factors, such as experience, education, skills, certifications, and other business needs. This role is eligible for a discretionary bonus.

Cotiviti offers team members a competitive benefits package to address a wide range of personal and family needs, including medical, dental, vision, disability, and life insurance coverage, 401(k) savings plans, paid family leave, 9 paid holidays per year, and 17-27 days of Paid Time Off (PTO) per year, depending on specific level and length of service with Cotiviti. For information about our benefits package, please refer to our Careers page.

Since this job will be based remotely, all interviews will be conducted virtually.

Date of posting: 9/11/2026

Applications are assessed on a rolling basis. We anticipate that the application window will close on 12/11/2026, but the application window may change depending on the volume of applications received or close immediately if a qualified candidate is selected.

#LI-LL1

#remote

#senior