Senior Cloud & AI Security Architect (Remote)

Ensono; Atlanta (GA); A distancia; USD 155.000 - 210.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Unlimited Paid Days Off

Three health plan options

401k with company match

Education Reimbursement

Sabbatical leave

Flexible work schedule

Descripción de la vacante

Ensono is seeking a Senior Security Architect for remote work in the United States. You will lead security architecture across cloud and AI, translating business and risk requirements into practical design patterns and guardrails.

You’ll collaborate with multiple teams to ensure secure‑by‑design, resilient, and scalable solutions across Azure, AWS, GCP, and SaaS platforms. You will define governance, conduct threat modeling, and mentor delivery teams while applying frameworks like NIST, CIS, and

Formación

• Bachelor’s degree in Computer Science, Information Security, Information Technology, Engineering, Mathematics, or a related field, or equivalent relevant experience.
• 8+ years of cybersecurity experience, including significant responsibility for security architecture and the design and review of secure enterprise solutions.
• Designed and reviewed security architectures for complex enterprise environments spanning cloud security, identity and access management, Zero Trust, data protection, network security, threat modeling, and secure‑by‑design principles.
• Designed cloud security architectures in Microsoft Azure and/or AWS, including multi‑cloud and hybrid‑cloud environments.
• Designed or governed security controls for cloud identity and privileged access, CSPM/CWPP, network segmentation, containers and Kubernetes, serverless services, encryption, key and secrets management, cloud logging and monitoring, and infrastructure as code.
• Conducted security architecture or risk assessments for AI/ML and generative AI solutions, including LLM applications, RAG, AI agents, model APIs, gateways, AI data flows, and third‑party AI services.
• Translated business, technology, risk, privacy, and compliance requirements into security architectures, standards, reference patterns, guardrails, and actionable technical requirements.
• Led or contributed to threat modeling and risk analysis and incorporated secure SDLC, DevSecOps, defense in depth, least privilege, and security architecture governance into solution designs.
• Applied security frameworks and controls to solution designs, including NIST CSF, NIST SP 800-53, NIST SP 800-160, NIST SP 800-207, NIST AI RMF, CSA CCM, CIS Controls and Benchmarks, ISO/IEC 27001, and OWASP guidance.
• 5+ years of cybersecurity experience within a professional services, consulting, or managed services environment, supporting complex enterprise or client environments.
• Led security architecture reviews for complex enterprise solutions, identifying material risks, defining required security controls and mitigations, documenting residual risk, and presenting recommendations to technical and executive stakeholders.

Responsabilidades

• Own and evolve enterprise cloud and AI security architecture principles, roadmaps, reference architectures, reusable design patterns, and technical standards.
• Lead security architecture reviews for new solutions, material changes, cloud deployments, AI use cases, AI agents, SaaS platforms, applications, APIs, and third‑party integrations.
• Translate business and technical requirements into risk‑informed security requirements and designs that balance protection, usability, scalability, cost, and delivery speed.
• Design and review secure multi‑cloud and hybrid architectures, including cloud identity, privileged access, network segmentation, private connectivity, workload protection, containers, serverless services, data protection, key and secrets management, logging, monitoring, resilience, and recovery.
• Define cloud governance guardrails using policy‑as‑code, infrastructure‑as‑code security, secure baselines, configuration standards, posture management, workload protection, and continuous compliance capabilities.
• Assess cloud architectures against shared‑responsibility requirements and identify clear ownership for cloud service provider, Ensono, customer, and third‑party controls.
• Define security architecture for generative AI, machine learning, AI‑enabled applications, retrieval‑augmented generation, AI gateways, AI agents, plugins, tools, APIs, and Model Context Protocol integrations.
• Establish AI security requirements covering data classification and handling, model and agent access, non‑human identities, least privilege, prompt‑injection defenses, secure retrieval sources, output validation, model and software supply chain risk, audit logging, monitoring, human oversight, and emergency disablement.
• Perform threat modeling and abuse‑case analysis for cloud and AI solutions, documenting threats, attack paths, trust boundaries, mitigations, residual risk, and required monitoring.
• Partner with application and platform teams to embed security requirements into the system development lifecycle, CI/CD pipelines, cloud landing zones, architecture review gates, and deployment processes.
• Provide expert guidance on Zero Trust, identity‑centric security, data‑centric protection, secure APIs, segmentation, cryptography, security telemetry, and defense in depth.
• Document architecture decisions, control mappings, exceptions, risks, and remediation recommendations; present design options and residual risk to technical and executive stakeholders.
• Collaborate with Security Operations and Incident Response to ensure cloud and AI architectures generate appropriate telemetry and support detection, investigation, containment, and recovery.
• Evaluate emerging technologies, security products, and supplier capabilities; contribute to technology selection, proofs of concept, and strategic security roadmaps.
• Mentor engineers, architects, and delivery teams; deliver knowledge transfer and promote consistent application of security architecture standards.

Conocimientos

Cloud security architecture

Threat modeling

Risk assessment

Zero Trust

Security governance

Educación

Bachelor's degree in Computer Science or related field

8+ years cybersecurity experience

Professional services/consulting experience

Herramientas

Microsoft Defender for Cloud

Microsoft Sentinel

Azure AD / Entra ID

AWS Security Hub

Descripción del empleo

Ensono is seeking a Senior Security Architect for remote work in the United States. You will lead security architecture across cloud and AI, translating business and risk requirements into practical design patterns and guardrails.

You’ll collaborate with multiple teams to ensure secure‑by‑design, resilient, and scalable solutions across Azure, AWS, GCP, and SaaS platforms. You will define governance, conduct threat modeling, and mentor delivery teams while applying frameworks like NIST, CIS, and