Security & Infrastructure Architect

Jobgether; United States; Remoto; USD 104.000 - 157.000; Tempo pieno

Vantaggi offerti da questo lavoro

Comprehensive health insurance.

Dental and vision insurance.

Flexible Time Off.

401(k) retirement plan.

Remote work arrangement within the US.

Descrizione del lavoro

Partner Company, listed on behalf of a partner, seeks a Security & Infrastructure Architect in the United States to shape security across a multi-cloud environment (AWS/Azure). You will define configuration standards, assess infrastructure, and guide secure deployment of new cloud services.

You will partner with infrastructure, reliability, IT Operations, and Compliance teams to document patterns, drive secure decisions, and ensure audit readiness while expanding coverage to identity, endpoints,

Competenze

• Minimum 5 years in cloud engineering, infrastructure, systems engineering, or security engineering.
• Minimum 3 years in an architecture, senior engineering, or technical design role focused on standards.
• Hands-on AWS or Azure security configuration experience.
• Experience with infrastructure as code, particularly Terraform.
• Familiarity with GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001.

Mansioni

• Define and maintain secure configuration standards across AWS and Azure.
• Assess cloud environments against baselines and prioritize remediation.
• Translate assessment findings into actionable technical guidance for engineering teams.
• Embed security requirements into new cloud services and IaC workflows.
• Review cloud architecture proposals and changes for security risks.
• Maintain and evolve cloud security standards as platforms change.
• Develop hardened configuration baselines using DISA STIGs, CIS Benchmarks, or similar.

Conoscenze

Cloud security

Security architecture

Documentation

Cross-functional collaboration

Communication

Influence technical decisions

AI-forward mindset

Strumenti

Terraform

AWS security configurations

Azure security configurations

Cloud security posture management tools

Entra ID

Active Directory

Okta

EDR

SIEM

Descrizione del lavoro

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security & Infrastructure Architect based in the United States.

The Security & Infrastructure Architect will shape and strengthen security architecture across a growing multi-cloud environment spanning AWS and Azure. This role is responsible for defining secure configuration standards, assessing existing infrastructure, and ensuring that new cloud services and designs meet established security requirements before deployment. You will collaborate closely with infrastructure, platform, reliability, IT Operations, and Compliance teams to turn security requirements into practical technical solutions. The position combines cloud security architecture, infrastructure design, continuous monitoring, and compliance support in a complex and evolving technology environment. You will also establish reusable architecture patterns and documentation that help teams make consistent, secure decisions. This is an opportunity to influence security practices across cloud, identity, endpoint, network, and enterprise systems.

Accountabilities

• Define and maintain secure configuration standards across AWS and Azure, covering identity and access management, network boundaries, encryption, logging, secrets management, and workload protection.
• Assess cloud environments against established security baselines, identify gaps, and prioritize remediation activities.
• Translate assessment findings into actionable technical recommendations and implementation guidance for engineering teams.
• Partner with platform, infrastructure, and site reliability engineering teams to embed security requirements into new cloud services and infrastructure-as-code workflows.
• Review cloud architecture proposals and infrastructure-as-code changes for security risks before implementation.
• Maintain and evolve cloud security standards as platforms, services, and organizational requirements change.
• Develop hardened configuration baselines for operating systems, cloud services, and infrastructure using DISA STIGs, CIS Benchmarks, or equivalent standards.
• Define scan and monitoring coverage in alignment with authorization boundaries, ensuring newly deployed systems are appropriately included.
• Create and maintain architecture standards, reference patterns, technical diagrams, and design decision records.
• Review infrastructure, platform, and integration designs, identifying security concerns early enough to influence technical decisions.
• Maintain accurate current-state architecture documentation across cloud environments, identity systems, endpoints, SaaS platforms, networks, and integrations.
• Translate security and compliance requirements into technical configurations and design guidance that IT Operations and engineering teams can implement.
• Provide Compliance teams with architecture documentation and technical evidence to support System Security Plans, audits, and ongoing assessments.
• Identify opportunities to use automation and AI tools to improve security assessments, configuration checks, evidence collection, and overall productivity.

Requirements

• At least 5 years of experience in cloud engineering, infrastructure, systems engineering, or security engineering.
• At least 3 years in an architecture, senior engineering, or technical design role focused on establishing standards and guiding implementation.
• Strong hands-on expertise in AWS or Azure security configuration, together with working knowledge of the other platform.
• Experience reviewing or developing infrastructure as code, particularly with Terraform.
• Familiarity with cloud security posture management tools and the ability to distinguish meaningful security findings from false positives or low-priority alerts.
• Practical experience implementing hardened configuration baselines using DISA STIGs, CIS Benchmarks, or comparable frameworks.
• Working knowledge of continuous monitoring requirements under FedRAMP or GovRAMP, including scan coverage and evidence expectations.
• Experience automating configuration validation, security checks, or compliance evidence collection.
• Familiarity with enterprise IT environments and tools, including Microsoft 365, Entra ID, Active Directory, Okta, MDM/UEM platforms, EDR, and SIEM solutions.
• Strong technical documentation skills, including architecture diagrams, standards, decision records, and design reviews.
• Familiarity with compliance frameworks such as GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001.
• Ability to influence technical decisions through sound judgment and clear communication, even without direct ownership of the teams involved.
• Good judgment in determining when to escape security concerns and when to defer to the accountable technical team.
• An AI-forward mindset, with demonstrated experience using AI tools responsibly to improve productivity, decision-making, and work quality.
• Strong analytical, problem-solving, communication, and cross-functional collaboration skills.
• Authorization to work in the United States; visa sponsorship is not available now or in the future.

Benefits

• Estimated salary grade range: $104,400–$156,600.
• Anticipated hiring range: $115,000–$125,000, depending on skills, qualifications, experience, and other relevant factors.
• Comprehensive health insurance.
• Dental and vision insurance.
• Flexible Time Off.
• 401(k) retirement plan.
• Additional benefits as part of the comprehensive employee package.
• Remote work arrangement within the United States.