Principal Cloud Security Architect

Nextracker LLC, USA; Fremont (CA); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health care coverage

401(k) with company matching

Unlimited time off

Job summary

Nextracker LLC, USA, is seeking a Principal Cloud Security Architect based in Fremont, California. The role demands deep expertise in designing and securing distributed systems, focusing on cloud-connected robotic products and effective integrations.

You will evaluate security architectures, enforce secure coding standards, and collaborate with cross-functional teams. Candidates should have extensive experience in cybersecurity, strong software engineering skills, and a relevant degree. The position offers comprehensive benefits and fosters an inclusive workplace.

Qualifications

• 7‑10+ years of experience in software architecture, system design, or cybersecurity engineering.
• Proven experience with secure coding and deployment standards.
• Strong understanding of device-to-cloud communication.

Responsibilities

• Evaluate and document system architectures integrating embedded, edge, and cloud components.
• Drive adoption of DevSecOps principles in CI/CD pipelines.
• Collaborate with IT and product security teams for compliance.
• Perform code reviews and threat modeling.

Skills

Designing distributed or hybrid cloud systems

Software architecture

Cybersecurity engineering

Hands-on coding (Python, C/C++, Go, Java, Rust)

Secure coding practices

Embedded software principles

DevSecOps principles

CI/CD tools implementation

Communication for cross-functional collaboration

Education

Bachelor’s or Master’s degree in Computer Science or related field

Tools

AWS

Azure

GCP

Terraform

Kubernetes

Docker

Job description

Job Description: Position Overview

We are seeking a highly skilled Principal Cloud Security Architect with deep experience designing and securing distributed systems that span embedded devices, edge components, and cloud-based infrastructures. This individual will be responsible for evaluating and supporting the security of our cloud-connected robotic and inspection products. They will also support the creation of cloud-based multiple product integrations, both within the company and with partner customers and companies. The ideal candidate will combine strong software engineering skills with expertise in cybersecurity, secure coding, and modern cloud technologies. You will play a critical role in evaluating system designs, reviewing code, and ensuring secure deployments across the full technology stack.

Key Responsibilities

• Architect and Design: Evaluate and document end-to-end system architectures integrating embedded, edge, and cloud components.
• Evaluate and coordinate efforts to establish integrated solutions between multiple product-specific systems.
• Security and Compliance: Establish and maintain secure coding and deployment standards.
• Drive adoption of DevSecOps principles and security automation throughout CI/CD pipelines.
• Perform code reviews and threat modeling for embedded, backend, and cloud software.
• Collaborate with IT and product security teams to ensure compliance with security frameworks (e.g., ISO 27001, NIST, OWASP).
• Evaluate new technologies, frameworks, and tools for secure and efficient deployment.
• Work closely with firmware, backend, and cloud engineering teams to define interfaces and data security requirements.
• Partner with product management and operations to align architecture with product roadmaps and reliability goals.

Required Qualifications

• Education: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Software Engineering, or related field.
• Experience: 7‑10+ years of professional experience in software architecture, system design, or cybersecurity engineering.
• Technical Expertise:
  • Proven experience designing distributed or hybrid cloud systems (AWS, Azure, or GCP).
  • Hands‑on coding experience in modern languages (Python, C/C++, Go, Java, or Rust).
  • Experience evaluating and enforcing secure coding design, particularly for cloud-connected embedded devices.
  • Experience implementing effective CI/CD scanning and analysis tools.
  • Strong understanding of embedded software principles, real‑time systems, and device‑to‑cloud communication (MQTT, REST, gRPC).
  • Familiarity with infrastructure‑as‑code (Terraform, CloudFormation) and container orchestration (Kubernetes, Docker).
  • Knowledge of CVEs and mitigation strategies in embedded and cloud contexts.
• Preferred: Zero‑trust architectures, identity management (OAuth2, JWT, IAM), secure OTA updates, industrial IoT, energy systems, open‑source security contributions, security certifications (CISSP, CEH, CSSLP, AWS/Azure Specialty).
• Soft Skills: Excellent communication for cross‑functional collaboration; balance innovation with compliance and operational reliability.

Benefits

Health care coverage, dental and vision, 401(k) with company matching, paid holidays with unlimited time off, discretionary company bonuses, life and disability protection, and eligibility for stock compensation. Positions may also offer additional benefits in accordance with plan documents.

Equal Opportunity Employer

Nextpower is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.