Senior Cloud & Infrastructure Security Architect

TikTok; San Jose, Northern (CA, KY); Hybrid; USD 134,000 - 223,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401(k) with company match

Paid parental leave

Disability insurance

Life insurance

Wellbeing benefits

Paid holidays

Paid sick days

Paid Personal Time

Job summary

TikTok is seeking a Sr. Infrastructure Security Specialist to lead security architecture and controls across data centers and cloud environments. This role operates within the Global Security Organization in San Jose, focusing on threat modeling, automation, and CI/CD security integration.

You will drive defense-in-depth, IaC, and cloud network security while collaborating with cross-functional teams to advance security maturity in a fast-paced enterprise environment.

Qualifications

• Proven expertise in designing and implementing security controls across Hybrid and Multi-Cloud environments (e.g., Data Centers, AWS, Azure, GCP, OCI).
• Hands-on experience with key cloud security tooling and concepts (CSPM, CNAPP, CASB, DLP).
• Solid experience with threat modeling, risk assessment methodologies, and security validation techniques.
• Demonstrated ability to automate security control implementation and validation using tools or scripting.
• Strong working knowledge of industry security frameworks (e.g., NIST CSF, ISO 27001) and regulatory requirements (e.g., GDPR, SOX).
• Ability to work 5 days a week in office.
• 5+ years of professional experience in cybersecurity, with a primary focus on cloud and infrastructure security.
• Master’s degree in a technical field or holding a relevant professional security certification (e.g., CISSP, CCSP, CCSK, or Cloud Security Specialty certifications).
• Proven experience working within a large-scale, global enterprise or highly agile, fast-paced technology environment.
• Deep hands-on experience developing internal security tools and utilities in Python or Go for security validation, observability, and enforcement across hybrid cloud landscapes.
• Deep familiarity with securing modern infrastructure technologies, including containerization (Kubernetes/Docker), Zero Trust Architecture, SASE, and CI/CD security integration.
• Demonstrated expertise in advanced automation and validation techniques, such as Policy-as-Code (e.g., OPA/Rego, Sentinel) and continuous control validation platforms.

Responsibilities

• Own security architecture and control frameworks across data centers and multi-cloud environments (OCI, AWS, Azure, GCP).
• Implement defense-in-depth controls across IaaS, PaaS, containers, and IAM.
• Lead threat modeling and architecture reviews to identify and mitigate risks.
• Embed automated security scanning, policy-as-code, and gates into CI/CD pipelines.
• Build scalable IaC frameworks to enforce security baselines and prevent drift.
• Collaborate with engineering and biz teams to shift security left in design.
• Advance control maturity via assessments and automation-focused roadmaps.
• Design cloud network security controls including VPCs, micro-segmentation, and firewall policies.

Skills

Hybrid/Multi-Cloud security

Threat modeling

Automation

CI/CD security

Security architecture

Regulatory compliance

Python/Go scripting

Zero Trust Architecture

Cloud security concepts

Education

Master's degree in technical field

Security certification (CISSP/CCSP/CCSK)

Tools

Kubernetes

Docker

Cloud security tooling (CSPM/CNAPP/CASB/DLP)

OPA/Rego / Policy-as-Code

Job description

TikTok is seeking a Sr. Infrastructure Security Specialist to lead security architecture and controls across data centers and cloud environments. This role operates within the Global Security Organization in San Jose, focusing on threat modeling, automation, and CI/CD security integration.

You will drive defense-in-depth, IaC, and cloud network security while collaborating with cross-functional teams to advance security maturity in a fast-paced enterprise environment.