Remote Cloud Security Architect — IAM & DevSecOps Leader

SailPoint Technologies Holdings, Inc.; United States; Remote; USD 174,000 - 294,000; Full time

Benefits offered by this job

Health and wellness coverage

Disability coverage

Life protection

401(k) plan with company match

Flexible spending accounts

Paid holidays

Parental leave

Employee assistance program

Job summary

SailPoint Technologies Holdings, Inc. is seeking a Cloud Security Architect for a US-based remote role with in-person interviews. You will design secure cloud architectures across AWS/Azure/GCP, implement guardrails, and lead IAM and security tooling efforts to protect cloud workloads.

Collaboration with engineering and DevOps is essential. The role requires 5+ years in cloud security, hands-on cloud experience, and knowledge of compliance frameworks.

Qualifications

• 5+ years of cloud security or security architecture experience.
• Hands-on experience securing workloads in AWS, Azure and/or GCP.
• Knowledge of IAM, network security, encryption and key management.

Responsibilities

• Design and govern secure cloud security architecture across IaaS, PaaS, SaaS.
• Lead security reviews and provide architecture guidance from design to deployment.
• Develop IAM strategies including least privilege, federation, RBAC.
• Embed security into CI/CD pipelines and DevSecOps practices.
• Conduct threat modeling and risk assessments for cloud workloads.
• Ensure compliance with SOC 2, ISO 27001, NIST, CIS benchmarks as applicable.

Skills

Cloud security

Security architecture

IAM

CI/CD security

Cross-functional collaboration

Education

Certifications preferred (CCSP / cloud security)

Tools

AWS Security Hub

Azure Defender

Prisma Cloud

CSPM/CWPP platforms

Kubernetes security

Job description

SailPoint Technologies Holdings, Inc. is seeking a Cloud Security Architect for a US-based remote role with in-person interviews. You will design secure cloud architectures across AWS/Azure/GCP, implement guardrails, and lead IAM and security tooling efforts to protect cloud workloads.

Collaboration with engineering and DevOps is essential. The role requires 5+ years in cloud security, hands-on cloud experience, and knowledge of compliance frameworks.