Senior Cloud & AI Security Architect

Brookfield Asset Management Inc.; Tennessee; Hybrid; USD 150,000 - 190,000; Full time

Job summary

Brookfield Asset Management is seeking a Staff Security Engineer to secure our Cloud & AI Platform for Real Estate. You will lead threat modelling, security design reviews, and implement controls across AWS, IaC, and AI systems.

In this builder role, you will partner with Cloud Solutions, AI engineering, Identity, and CyberOps to deliver reusable security patterns, safe rollouts, and evidence-driven guardrails across multiple accounts.

Qualifications

• 8+ years of experience in production security or platform systems.
• Senior or staff-level ownership and architecture decisions.
• Deep AWS security experience across IAM, multi-account, logging, KMS, networking.
• Strong Terraform/OpenTofu, modular design, remote execution, policy controls.
• Experience securing CI/CD systems such as GitHub Actions, including OIDC federation, runner trust boundaries, secrets, artifacts, and deployment permissions.
• Ability to read and write production-quality automation or application code in Python, Go, Ruby.
• Nice to Have: Bedrock, AgentCore, MCP, LLM gateways, AI guardrails, production agentic systems.
• Container security: ECS/Fargate or EKS, image supply chains, runtime isolation.

Responsibilities

• Lead security architecture for cloud and AI platforms; set direction and secure-by-default patterns.
• Define security engineering standards and document key decisions; communicate risk to leadership.
• Review designs for authorization, data protection, secrets, and tenant isolation.
• Mentor engineers to make sound security decisions independently.
• Partner with Cloud Solutions, AI engineering, Identity, CyberOps, and GRC/Privacy to drive adoption.
• Own AWS multi-account security: account boundaries, SCPs, IAM Identity Center, KMS, VPC controls, WAF.
• Design least-privilege access across AWS, Okta, GitHub Actions, and IaC platforms.

Skills

8+ years

AWS security

Terraform/OpenTofu

GitHub Actions

App security

Threat modelling

IAM & access

CI/CD security

Python/Go/Ruby

Tools

Terraform/OpenTofu

GitHub Actions

Okta

CloudWatch

KMS

CloudTrail

Job description

Brookfield Asset Management is seeking a Staff Security Engineer to secure our Cloud & AI Platform for Real Estate. You will lead threat modelling, security design reviews, and implement controls across AWS, IaC, and AI systems.

In this builder role, you will partner with Cloud Solutions, AI engineering, Identity, and CyberOps to deliver reusable security patterns, safe rollouts, and evidence-driven guardrails across multiple accounts.