Security & Infrastructure Architect

Jobgether; Oregon; Hybrid; USD 104,000 - 157,000; Full time

Benefits offered by this job

Comprehensive health insurance

Dental and vision insurance

Remote work within the United States

401(k) retirement plan

Flexible Time Off

Additional employee benefits

Job summary

Jobgether seeks a Security & Infrastructure Architect in the United States to shape security across a multi-cloud environment (AWS and Azure). You will define secure configurations, assess existing infrastructure, and ensure new services meet security requirements before deployment.

You will collaborate with infrastructure, reliability, IT operations, and Compliance to translate security requirements into practical designs and solutions.

Qualifications

• 5+ years in cloud engineering, infra, systems, or security engineering.
• 3+ years in architecture, senior engineering, or design role.
• Strong hands-on AWS or Azure security configuration with knowledge of the other platform.
• Experience with infrastructure as code, esp. Terraform.
• Familiarity with cloud security posture management tools and meaningful findings.
• Experience hardening baselines using DISA STIGs or CIS Benchmarks.
• Knowledge of FedRAMP or GovRAMP continuous monitoring requirements.
• Experience automating configuration validation and evidence collection.
• Familiarity with enterprise IT tools (M365, Entra ID, AD, Okta, EDR, SIEM).
• Strong documentation skills: diagrams, standards, decision records.

Responsibilities

• Define and maintain secure configuration standards across AWS and Azure.
• Assess cloud environments against baselines and prioritize remediation.
• Translate findings into actionable recommendations for engineering teams.
• Embed security requirements into cloud services and IaC workflows.
• Review architecture proposals and IaC changes for security risks.
• Maintain and evolve cloud security standards with changing needs.
• Develop hardened baselines for OS, cloud services, and infra using standards.
• Define scan and monitoring coverage aligned with authorization boundaries.
• Create architecture standards, diagrams, and decision records.
• Identify security concerns early in designs to influence decisions.
• Maintain current-state architecture docs across cloud, identity, endpoints, and networks.
• Translate requirements into technical configurations for IT Operations and engineering.
• Provide architecture docs and evidence for audits and System Security Plans.
• Explore automation and AI to improve security assessments and evidence collection.

Skills

Cloud security architecture

Infrastructure as code (Terraform)

Security review & design

Documentation & diagrams

Automation & AI for security

Tools

Terraform

SIEM

EDR

M365 / Entra ID / AD

Okta / MDM

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security & Infrastructure Architect based in the United States. The Security & Infrastructure Architect will shape and strengthen security architecture across a growing multi-cloud environment spanning AWS and Azure. This role is responsible for defining secure configuration standards, assessing existing infrastructure, and ensuring that new cloud services and designs meet established security requirements before deployment. You will collaborate closely with infrastructure, platform, reliability, IT Operations, and Compliance teams to turn security requirements into practical technical solutions. The position combines cloud security architecture, infrastructure design, continuous monitoring, and compliance support in a complex and evolving technology environment. You will also establish reusable architecture patterns and documentation that help teams make consistent, secure decisions. This is an opportunity to influence security practices across cloud, identity, endpoint, network, and enterprise systems.

Accountabilities

• Define and maintain secure configuration standards across AWS and Azure, covering identity and access management, network boundaries, encryption, logging, secrets management, and workload protection.
• Assess cloud environments against established security baselines, identify gaps, and prioritize remediation activities.
• Translate assessment findings into actionable technical recommendations and implementation guidance for engineering teams.
• Partner with platform, infrastructure, and site reliability engineering teams to embed security requirements into new cloud services and infrastructure-as-code workflows.
• Review cloud architecture proposals and infrastructure-as-code changes for security risks before implementation.
• Maintain and evolve cloud security standards as platforms, services, and organizational requirements change.
• Develop hardened configuration baselines for operating systems, cloud services, and infrastructure using DISA STIGs, CIS Benchmarks, or equivalent standards.
• Define scan and monitoring coverage in alignment with authorization boundaries, ensuring newly deployed systems are appropriately included.
• Create and maintain architecture standards, reference patterns, technical diagrams, and design decision records.
• Review infrastructure, platform, and integration designs, identifying security concerns early enough to influence technical decisions.
• Maintain accurate current-state architecture documentation across cloud environments, identity systems, endpoints, SaaS platforms, networks, and integrations.
• Translate security and compliance requirements into technical configurations and design guidance that IT Operations and engineering teams can implement.
• Provide Compliance teams with architecture documentation and technical evidence to support System Security Plans, audits, and ongoing assessments.
• Identify opportunities to use automation and AI tools to improve security assessments, configuration checks, evidence collection, and overall productivity.

Requirements

• At least 5 years of experience in cloud engineering, infrastructure, systems engineering, or security engineering.
• At least 3 years in an architecture, senior engineering, or technical design role focused on establishing standards and guiding implementation.
• Strong hands-on expertise in AWS or Azure security configuration, together with working knowledge of the other platform.
• Experience reviewing or developing infrastructure as code, particularly with Terraform.
• Familiarity with cloud security posture management tools and the ability to distinguish meaningful security findings from false positives or low-priority alerts.
• Practical experience implementing hardened configuration baselines using DISA STIGs, CIS Benchmarks, or comparable frameworks.
• Working knowledge of continuous monitoring requirements under FedRAMP or GovRAMP, including scan coverage and evidence expectations.
• Experience automating configuration validation, security checks, or compliance evidence collection.
• Familiarity with enterprise IT environments and tools, including Microsoft 365, Entra ID, Active Directory, Okta, MDM/UEM platforms, EDR, and SIEM solutions.
• Strong technical documentation skills, including architecture diagrams, standards, decision records, and design reviews.
• Familiarity with compliance frameworks such as GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001.
• Ability to influence technical decisions through sound judgment and clear communication, even without direct ownership of the teams involved.
• Good judgment in determining when to elevate security concerns and when to defer to the accountable technical team.
• An AI-forward mindset, with demonstrated experience using AI tools responsibly to improve productivity, decision-making, and work quality.
• Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
• Authorization to work in the United States; visa sponsorship is not available now or in the future.

Benefits

• Estimated salary grade range: $104,400-$156,600.
• Anticipated hiring range: $115,000-$125,000, depending on skills, qualifications, experience, and other relevant factors.
• Comprehensive health insurance.
• Dental and vision insurance.
• Flexible Time Off.
• 401(k) retirement plan.
• Additional benefits as part of the comprehensive employee package.
• Remote work arrangement within the United States.