Principal Cloud Security Architect

Nextracker; Fremont (CA); On-site; USD 220,000 - 250,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) with company matching

Unlimited PTO

Stock compensation

Bonus opportunities

Job summary

Nextpower is seeking a Principal Cloud Security Architect to design, secure, and integrate distributed systems spanning embedded devices, edge components, and cloud infrastructures. You will review designs, enforce secure coding, and drive security automation across CI/CD pipelines.

The role requires strong software engineering and cybersecurity expertise, with hands-on coding in modern languages and a deep understanding of device-to-cloud communication.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Software Engineering, or related field.
• 7–10+ years of professional experience in software architecture, system design, or cybersecurity engineering.
• Proven experience designing distributed or hybrid cloud systems (AWS, Azure, or GCP).
• Hands-on coding experience in one or more modern languages (Python, C/C++, Go, Java, or Rust).
• Experience evaluating and enforcing secure coding design, particularly in evaluating risks in deploying cloud-connected embedded devices.
• Experience implementing effective CI/CD scanning and analysis tools.
• Strong understanding of embedded software principles, real-time systems, and device-to-cloud communication (MQTT, REST, gRPC).
• Knowledge of infrastructure-as-code (Terraform, CloudFormation) and container orchestration (Kubernetes, Docker).
• Knowledge of CVEs and mitigation strategies in embedded and cloud contexts.

Responsibilities

• Architect end-to-end architectures integrating embedded, edge, and cloud components.
• Coordinate integrated solutions between multiple product-specific systems.
• Establish and maintain secure coding and deployment standards.
• Drive DevSecOps adoption and security automation in CI/CD pipelines.
• Perform code reviews and threat modeling for embedded, backend, and cloud software.
• Collaborate with IT and product security teams to ensure compliance with security frameworks (ISO 27001, NIST, OWASP).
• Evaluate new technologies, frameworks, and tools for secure deployment.
• Define interfaces and data security requirements with firmware, backend, and cloud teams.
• Align architecture with product roadmaps and reliability goals.

Skills

Cloud security

Distributed systems design

DevSecOps

Threat modeling

Secure coding

Python

Go

C/C++

Java

Rust

MQTT/REST/gRPC

Terraform

CloudFormation

Kubernetes

Docker

Git

CI/CD security

Education

Bachelor’s or Master’s degree in Computer Science / Electrical Engineering / Software Engineering

Tools

Terraform

CloudFormation

Kubernetes

Docker

Git

Job description

Position Overview

We are seeking a highly skilled Principal Cloud Security Architect with deep experience designing and securing distributed systems that span embedded devices, edge components, and cloud-based infrastructures. This individual will be responsible for evaluating and supporting the security of our cloud-connected robotic and inspection products. They will also support the creation of cloud-based multiple product integrations, both within the company and with partner customers and companies. The ideal candidate will combine strong software engineering skills with expertise in cybersecurity, secure coding, and modern cloud technologies. You will play a critical role in evaluating system designs, reviewing code, and ensuring secure deployments across the full technology stack.

Key Responsibilities

Architect and Design

• Evaluate and document end-to-end system architectures integrating embedded, edge, and cloud components.
• Evaluate and coordinate efforts to establish integrated solutions between multiple product-specific systems.

Security and Compliance

• Establish and maintain secure coding and deployment standards.
• Drive adoption of DevSecOps principles and security automation throughout CI/CD pipelines.
• Perform code reviews and threat modeling for embedded, backend, and cloud software.
• Collaborate with IT and product security teams to ensure compliance with security frameworks (e.g., ISO 27001, NIST, OWASP, or similar).
• Evaluate new technologies, frameworks, and tools for secure and efficient deployment.
• Work closely with firmware, backend, and cloud engineering teams to define interfaces and data security requirements.
• Partner with product management and operations to align architecture with product roadmaps and reliability goals.

Required Qualifications

• Education: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Software Engineering, or related field.
• Experience: 7-10+ years of professional experience in software architecture, system design, or cybersecurity engineering.
• Technical Expertise: Proven experience designing distributed or hybrid cloud systems (AWS, Azure, or GCP).
• Hands-on coding experience in one or more modern languages (Python, C/C++, Go, Java, or Rust).
• Experience evaluating and enforcing secure coding design, particularly in evaluating risks in deploying cloud-connected embedded devicies.
• Experience implementing effective CI/CD scanning and analysis tools.
• Strong understanding of embedded software principles, real-time systems, and device-to-cloud communication (MQTT, REST, gRPC, etc.).
• Familiarity with infrastructure-as-code (Terraform, CloudFormation) and container orchestration (Kubernetes, Docker) and the key methods of baking security into those products.
• Knowledge of common vulnerabilities and exposures (CVEs), and mitigation strategies in both embedded and cloud contexts.

Preferred Qualifications

• Experience with zero-trust architectures, identity management (OAuth2, JWT, IAM), and secure OTA updates.
• Background in industrial IoT, energy systems, or mission-critical control environments.
• Contributions to open-source security tools or frameworks.
• Security certifications such as CISSP, CEH, CSSLP, or AWS/Azure Security Specialty.
• Soft Skills: Excellent communication skills for cross-functional collaboration. Ability to balance innovation with compliance and operational reliability.

Benefits

• We provide health care coverage
• dental and vision
• 401(K) participation including company matching
• company paid holidays with unlimited paid time off
• generous discretionary company bonuses
• life and disability protection and more
• Employees in certain positions may be eligible for stock compensation

For more information on Nextpower 's benefits please view our company website at www.nextpower.com.

Pay

Pay is based on market location and may vary based on factors including experience, skills, education and other job-related reasons.

The annual salary range for this position is $220,000 - $250,000.

At Nextpower, we are driving the global energy transition with an integrated clean energy technology platform that combines intelligent structural, electrical, and digital solutions for utility-scale power plants. Our comprehensive portfolio enables faster project delivery, higher performance, and greater reliability, helping our customers capture the full value of solar power. Our talented worldwide teams are redefining how solar power plants are designed, built, and operated every day with smart technology, data-driven insights, and advanced automation. Together, we're building the foundation for the world's next generation of clean energy infrastructure.

Nextpower is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

We are Nextpower At Nextpower, we are driving the global energy transition with an integrated clean energy technology platform that combines intelligent structural, electrical, and digital solutions for utility-scale power plants. Our comprehensive portfolio enables faster project delivery, higher performance, and greater reliability, helping our customers capture the full value of solar power. Our talented worldwide teams are redefining how solar power plants are designed, built, and operated every day with smart technology, data-driven insights, and advanced automation. Together, we're building the foundation for the world's next generation of clean energy infrastructure.