Lead Security Architect-Cloud Data and AI Platform

INSPYR Solutions; Reading (Berks County); On-site; USD 140,000 - 200,000; Full time

Job summary

INSPYR Solutions is guiding a cloud transformation from on-premises to a cloud-first model, designing secure, scalable architectures and enforcing governance across environments.

The role leads architecture, engineering standards, and reliability initiatives, collaborating with cross-functional teams and contractors to accelerate migration, improve uptime, and ensure compliance with SOX and CMMC requirements. The ideal candidate brings 10–20 years of cloud architecture and security experience.

Qualifications

• Experience securing cloud workloads in public cloud environments.
• Ability to translate regulatory requirements into technical controls.
• Strong understanding of cloud security best practices and governance.

Responsibilities

• Define cloud architecture, standards, and roadmaps across sites.
• Lead IT operations, incident handling, and reliability improvements.
• Drive automation, compliance, and continuous improvement with audit-ready controls.

Skills

IAM (SSO/MFA)

Network security design

Data protection & encryption

DevSecOps & monitoring

Education

Bachelor's degree in Computer Science, IT Security or related field

Certifications: CISSP, CISM, CCSP, Azure Security Engineer, AWS Security

Tools

Terraform

Azure Policy

CI/CD security checks

SIEM integration

Key management (KMS)

Job description

Our client is beginning its transition from traditional, physical data centers to a cloud-based infrastructure. This shift will enable the organization to create and manage virtual environments through web-based platforms rather than maintaining on-site hardware.

As part of this journey, the company is also exploring the use of AI to support business-related insights and decision-making. The transformation includes migrating data from physical environments to the cloud and building internal capabilities in cloud networking and architecture.

Key needs are for a cloud architect with strong expertise in:

• Cloud infrastructure design and migration
• Security, access, and data protection
• Compliance with regulatory and government risk policies

This individual will play a critical role in defining strategy and leading execution for the cloud transformation. While the internal team is relatively small, this person will collaborate closely across functions and may leverage contractors to support implementation efforts.

The initiative is already underway but still in the early stages, making this role essential to advancing and scaling the cloud strategy.

Responsibilities

• 50% - Architecture, Engineering Standards & Roadmap: Reduced architecture drift; consistent designs across sites; improved uptime and security posture through standardized patterns; execute with excellence.
• 30% - IT Operations, Incident Handling & Reliability: Faster MTTR, fewer repeat incidents, and improved reliability through disciplined incident/problem/change execution.
• 20% - Automation, Compliance & Continuous Improvement: Reduced manual work, human error, and change risk; improved audit outcomes; demonstrable control effectiveness for SOX and CMMC.

10-20 Years of experience

4 year Bachelor's Degree Required; Computer Science, IT Security or related field

Certifications: professional certifications such as CISSP, CISM, CCSP, or relevant cloud security certifications (e.g., Azure Security Engineer, AWS Security)

Other Qualifications/Skills:

• Cloud Platforms & Tools: Strong expertise in cloud security technologies and best practices. Hands-on experience with public cloud services (e.g., Azure, AWS, or GCP), with deep knowledge of securing cloud data services (data lakes, warehouses, streaming, etc.). Familiarity with modern analytics platforms (for instance, Azure Synapse, Microsoft Fabric, Databricks, or similar) and their security models is highly desirable.
• Technical Proficiency: Demonstrated skills in key security domains: Identity & Access Management: roles, SSO/MFA, identity governance. Network Security: VPC/VNet design, firewalls, VPN/ExpressRoute, zero-trust network access. Cryptography: data encryption strategies, key management systems (KMS), PKI. Data Protection & DLP: implementing classification, DLP tools/policies, data masking. Monitoring & DevSecOps: cloud logging/telemetry, SIEM integration, incident management, and automating security controls via code (e.g., Terraform, Azure Policy, CI/CD security checks).
• Regulated Data & Compliance: Experience securing sensitive and regulated data in a cloud environment. Knowledge of regulatory frameworks (such as ITAR, HIPAA, GDPR, or similar) and experience implementing controls to comply with them. Capable of translating regulatory and risk requirements into actionable technical solutions (e.g., enforcing geo-restrictions, user screening, encryption, and auditing to meet compliance).

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.

Applicants requiring reasonable accommodation during the application or interview process should contact [e-mail] for assistance.

Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.