Principal Cloud Security Architect

National Grid; Waltham (MA); Hybrid; USD 172,000 - 202,000; Full time

Job summary

National Grid in the United States seeks a Principal Cloud Security Architect to lead security architecture for Azure, driving risk reduction and implementing controls across cloud environments. You will partner with engineering, compliance and operations to design secure patterns and enable resilient workloads.

You will guide incident response, automate policies, and apply CNAPP and cloud-native security tools across Azure, AWS and other providers while communicating risk to technical and

Qualifications

• 5+ years securing cloud environments.
• 5+ years security controls, cloud governance, or security architecture in a medium to large enterprise.
• 5+ years Linux and Windows administration experience, preferably in cloud environments.
• 5+ years container technologies (Docker, Kubernetes, AKS, EKS) and related security practices.
• Strong knowledge of cloud-native services, networking, storage, encryption, policies and controls.
• Hands-on experience across Azure (preferred), AWS and/or GCP.
• Experience with scripting and automation (CLI, PowerShell, Python, Bash, Terraform, GitHub Actions).
• Strong communication to explain risk to technical teams and business leaders.
• Ability to bridge technical and business priorities to drive decisions.

Responsibilities

• Design and implement secure Azure cloud architectures with network segmentation and access controls.
• Architect and operationalize secure cloud solutions balancing objectives, cybersecurity, and risk.
• Develop and socialize technical patterns, standards and guidance for cloud infra and apps.
• Administer CNAPP with hands-on configuration and remediation prioritization.
• Monitor cloud security posture and conduct risk analyses to prioritize fixes.
• Lead multi-cloud security solution selection and implementation based on risk profiles.
• Automate security policies and workflows to improve efficiency and scalability.
• Assist with incident response activities for cloud-related security incidents.
• Collaborate with cross-functional teams to embed security into deployments.

Skills

Cloud security architecture

DevOps & automation

Security risk management

Communication & presentation

Cross-functional collaboration

Incident response

Security governance

Security controls

Bridging tech & business

Tools

Docker

Kubernetes

AKS

EKS

Terraform

GitHub Actions

CLI / PowerShell

Python / Bash

Job description

About us

At National Grid, we keep people connected and society moving. But it's so much more than that. National Grid supplies us with the environment to make it happen. As we generate momentum in the energy transition for all, we don't plan on leaving any of our customers in the dark. So, join us as Principal Cloud Security Architect, and find your superpower. We need you!

We want to find an innovative, adaptable, and results-oriented Principal Cloud Security Architect for our Cybersecurity team. This position can be located in Brooklyn, NY, Hicksville, NY, Waltham, MA, or Syracuse, NY (candidates may also reside in either Connecticut, New Jersey, New Hampshire, Pennsylvania, Rhode Island, Vermont, or Maine). If you yearn to be innovative, contribute new ideas, and play a critical part in our Cloud Security organization, we want to hear from you!

What you'll do

As Principal Cloud Security Architect, you'll own the security architecture and operational security posture of Azure, working directly in the platform to design and implement controls, monitor risk, drive continuous remediation, to ensure compliance with industry regulations and best practices. You'll serve as a senior technical authority, representing cloud security operations strategies and initiatives, balancing architectural leadership with hands-on execution, and ensuring measurable risk reduction across cloud environments and workloads. You'll combine excellent relationship and collaboration skills, strong technical knowledge and hands-on experience with major cloud providers and emerging cloud security technologies, proficiency with DevOps and automation, and a practical approach to real-world risk reduction to solve complex security problems. Key responsibilities include the following:

• Design and implement secure Azure cloud architectures, including network segmentation, policies and access controls, and secure accounts and subscriptions to best practices.
• Assist with the architecting, engineering, and operationalizing of secure cloud solutions while balancing business objectives, cybersecurity requirements, and enterprise risk management considerations.
• Develop, implement, and socialize technical patterns, standards and guidance for cloud infrastructure and applications.
• Administer the Cloud Native Application Protection Platform (CNAPP), including hands-on administration and configuration of the CNAPP solution, prioritizing findings, and driving remediation activities.
• Monitor cloud security posture and conduct regular security assessments and risk analysis to identify vulnerabilities and prioritize remediation efforts.
• Research and assist with the selection, and lead the implementation of security solutions across Azure, AWS, and other major cloud providers, based on risk profiles.
• Automate security policies and workflows using scripting languages and cloud native security tools to improve efficiency and scalability.
• Assist with incident response activities for cloud-related security incidents, including investigation, containment, remediation, and post-mortem analysis.
• Collaborate with cross-functional teams (Business project teams, cloud platform and engineering teams, DevOps, Compliance) to integrate security practices into cloud infrastructure and application deployments.
• Serve as a trusted cloud security representative, effectively communicating technical risk, operational priorities, and influencing business stakeholders through clear communication, sound judgment, and data-driven, defensible recommendations.
• Perform additional cloud security, cybersecurity, and risk management responsibilities as required to support organizational objectives.

About you

• 5+ years of hands-on experience securing cloud environments.
• 5+ years of experience in security controls, cloud governance, and/or security architecture within a medium to large enterprise.
• 5+ years of Linux and Windows administration experience, preferably in cloud environments.
• 5+ years of experience with container technologies (Docker, Kubernetes, AKS, EKS, etc.) and associated security practices.
• Strong knowledge of cloud-native services, networking, storage, encryption, policies, and security controls / patterns.
• Hands-on experience supporting security initiatives across one or more major cloud platforms (Azure (preferred), AWS, and/or GCP).
• Experience with scripting and automation technologies (CLI, PowerShell, Python, Bash, Terraform, GitHub Actions / Pipelines, etc.) is desirable.
• Strong communication and presentation skills with the ability to succinctly convey complex cloud, security, and risk concepts to technical teams, business leaders, and stakeholders.
• Proven ability to bridge technical and business priorities, interface with management, and articulate defensible cloud security, risk and operational positions that drive informed decision-making.

More Information

Rewarding work and a collaborative, team-oriented culture are just the beginning. Review our digital benefit guide at ngbenefitslivebrighter.com for full details and descriptions.

Our organization follows a hybrid work structure in our service territory (NY & MA and adjacent states) where employees can work remotely or from the office, as needed. Working from the office is encouraged when working on tasks that require a high degree of collaboration. We work with our employees to foster a flexible work schedule.

Salary

Downstate NY $184,000 - $216,000 a year

Massachusetts $172,000 - $202,000 a year

Upstate NY $153,000 - $180,000 a year

National Grid will not be providing visa sponsorship for this position now or in the future. You must have the ability to work without a need for current or future visa sponsorship.

National Grid utilizes an assessment that evaluates the job qualifications/characteristics using AI or statistically based scoring. For more information, please view NYC Local Law 144.

This position has a career path which provides for advancement opportunities within and across bands as you develop and evolve in the position; gaining experience, expertise and acquiring and applying technical skills. Candidates will be assessed and provided offers against the minimum qualifications of this role and their individual experience.

National Grid is committed to providing equal employment opportunities to all employees and applicants for employment regardless of protected class. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, or any other protected status in accordance with applicable federal, state, and local laws. National Grid maintains affirmative action programs for individuals with disabilities and protected veterans.

Our employment practices are designed to ensure that all individuals are treated fair and with respect throughout the hiring process and during employment. National Grid complies with all applicable federal, state, and local anti-discrimination laws. We are dedicated to fostering a workplace that is free from unlawful discrimination and harassment, and we encourage a culture of respect for all.