Senior Cloud & Infra Security Architect (Multi-Cloud)

TikTok; San Jose (CA); On-site; USD 134,000 - 223,000; Full time

Job summary

TikTok's Global Security Organization (GSO) seeks an experienced Security Architect to design and evolve security architecture across hybrid/multi-cloud environments, data centers, and networks. You will implement defense-in-depth, automate controls, and validate them within CI/CD pipelines.

The role requires threat modeling expertise, strong knowledge of cloud security tooling, and collaboration with cross-functional teams to raise security maturity. Office presence is required.

Qualifications

• Proven expertise in designing and implementing security controls across Hybrid and Multi-Cloud environments (data centers, AWS, Azure, GCP, OCI).
• Hands-on experience with cloud security tooling concepts (CSPM, CNAPP, CASB, DLP).
• Solid experience with threat modeling, risk assessment, and security validation techniques.
• Ability to automate security control implementation and validation using tools or scripting.
• Knowledge of security frameworks (NIST CSF, ISO 27001) and regulatory requirements (GDPR, SOX).
• Ability to work 5 days a week in office.

Responsibilities

• Own security architecture and control frameworks across data centers and major cloud platforms in hybrid/multi-cloud environments.
• Implement defense-in-depth controls across IaaS, PaaS, containers, and IAM.
• Lead threat modeling and architecture reviews to identify and mitigate risks before production.
• Embed automated security scanning, policy-as-code, and gates into CI/CD pipelines.
• Build scalable IaC frameworks to enforce security baselines and reduce drift.
• Collaborate with engineering, infrastructure, and business teams to shift security left in design.
• Advance control maturity through assessments and a roadmap focused on automation.

Skills

Hybrid/Multi-Cloud

Threat modelling

Automation

CI/CD security

Security architecture

NIST CSF/ISO 27001

GDPR/SOX

Education

Master’s degree or security certification

Tools

Cloud security tooling

Policy-as-Code (OPA/Sentinel)

Job description

TikTok's Global Security Organization (GSO) seeks an experienced Security Architect to design and evolve security architecture across hybrid/multi-cloud environments, data centers, and networks. You will implement defense-in-depth, automate controls, and validate them within CI/CD pipelines.

The role requires threat modeling expertise, strong knowledge of cloud security tooling, and collaboration with cross-functional teams to raise security maturity. Office presence is required.