Senior Cloud Engineer

Acuity Brands; Atlanta (GA); On-site; USD 121,000 - 261,000; Full time

Benefits offered by this job

Health care

Dental coverage

Vision plans

401K benefits

Commission/incentive compensation

Job summary

Acuity Inc. is seeking a highly experienced Security Architect to lead secure designs for cloud-native platforms, connected products, and enterprise apps.

You will drive CNAPP capabilities, enforce guardrails, and integrate security into CI/CD pipelines while promoting secure-by-design and Zero Trust across development teams.

Qualifications

• Experience with CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework.
• Define and enforce cloud security baselines, guardrails, and landing zone standards.
• Ability to communicate findings and recommendations to both technical and non‑technical stakeholders.

Responsibilities

• Lead secure design and architecture reviews for cloud-native and distributed systems.
• Define and enforce CNAPP capabilities, guardrails, and policy-as-code frameworks.
• Integrate security controls into CI/CD pipelines and promote secure-by-design practices.
• Define cloud security standards, patterns, and reusable controls across teams.
• Advocate Zero Trust and secure architectures across Acuity's platforms.

Skills

CNAPP

Cloud security

DevSecOps

Zero Trust

Kubernetes security

IaC security

Job description

Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people’s lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us at www.acuityinc.com.

Work location:

• This position may be based anywhere in the United States and includes travel as part of the responsibilities.
• This position requires on-site presence in Atlanta, GA, Dallas, TX, following a hybrid work model.
• This position requires on-site presence in Atlanta, GA, Dallas, TX, must report to the office every business day.

Job Summary

Acuity Brands is seeking a highly experienced and hands-on Security Architect to lead the design and implementation of secure architectures across our cloud-native platforms, connected products, and enterprise applications.

Key Tasks & Responsibilities (Essential Functions)

Cloud Security Architecture & CNAPP

• Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms
• Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework, including their use for posture management, workload protection, and identity risk analysis. Own and drive Cloud-Native Application Protection Platform (CNAPP) capabilities, including:
  • CSPM (posture management and misconfiguration detection)
  • CWPP (runtime protection for VMs, containers, serverless)
  • CIEM (identity entitlement and least privilege enforcement)
  • Kubernetes and container security (AKS, image hardening, runtime controls)
• Experience defining and enforcing cloud security guardrails, landing zone controls, and policy-as-code frameworks
• Define and enforce cloud security baselines, guardrails, and landing zone standards
• Assess and secure:
• AKS/Kubernetes environments
• Infrastructure-as-Code (Terraform, ARM, Bicep)
• Service-to-service and API communication patterns

DevSecOps & Automation

• Integrate security controls into CI/CD pipelines, enabling both shift-left and runtime security
• Drive adoption of:
  • SAST, DAST, SCA Toolchain
  • Container and IaC scanning
  • Policy-as-code for scalable enforcement

Security Governance & Enablement

• Define and maintain cloud security standards, patterns, and reusable controls
• Drive continuous improvement in security posture and maturity across development teams
• Influence cross-functional teams to adopt secure-by-design and Zero Trust principles

Preferred Skills and Experience

• Effectively document and communicate security assessment findings, recommendations, and remediation strategies to a diverse audience, including technical teams and non-technical business stakeholders, ensuring clarity and actionable guidance for all parties involved.
• Demonstrable ability to analyze business direction and problems, understand long term vision and risk in developing strategic technical solutions.
• Azure Security Certifications are a plus

The range for this position is $120,800.00 to $261,000.00 USD. Placement within this range may vary, depending on the applicant’s experience and geographic location. Acuity offers generous benefits including health care, dental coverage, vision plans, 401K benefits, and commissions/incentive compensation depending on the role. For a list of our benefits,

We value diversity and are an equal opportunity employer. All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law.

Accommodation in the Application Process: Acuity Inc. is an equal opportunity employer. It complies with the Americans with Disabilities Act (ADA) and other applicable laws requiring reasonable accommodation of persons with disabilities in employment. This includes the provision of reasonable accommodation in the application process. If you believe you need reasonable accommodation to assist with our online application system or any aspect of the application process, please contact Human Resources at [phone], and select option 4. Please be prepared to identify the requisition / position applied for and the aspect of the application process for which you believe accommodation is needed. The company will engage in an interactive process with you to better understand the request and to determine whether reasonable accommodation is needed and available.

Any unsolicited resumes sent to Acuity Inc. from a third party, such as an Agency recruiter, including unsolicited resumes sent to an Acuity Inc. mailing address, fax machine or email address, directly to Acuity Inc. employees, or to Acuity Inc. resume database will be considered Acuity Inc. property. Acuity Inc. will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Acuity Inc. will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor, but does not have the appropriate approvals to be engaged on a search.

E-Verify Participation Poster

e-verify.gov

eeoc.gov