Senior Cloud & Infrastructure Security Architect (Hybrid)

TikTok Inc.; San Jose (CA); On-site; USD 134,000 - 223,000; Full time

Benefits offered by this job

Medical insurance

401(k) with company match

Parental leave

Short-term disability

Long-term disability

Life insurance

Wellbeing benefits

Paid holidays

Paid sick days

Paid personal time

Job summary

TikTok Inc. seeks a Security Architect within the Global Security Organization to design and mature cloud security architecture across hybrid/multi-cloud environments and data centers.

You will implement defense-in-depth controls and validate them aligned with security policies and regulations. Responsibilities include threat modeling, CI/CD security integration, and building scalable IaC to enforce baselines, while collaborating with engineering and business teams to elevate security maturity

Qualifications

• Design and implement security controls across Hybrid/Multi-Cloud environments.
• Automate security validation using scripting or tools.
• Knowledge of NIST CSF, ISO 27001, GDPR, SOX.
• Proactive threat modeling and risk assessments.

Responsibilities

• Own security architecture and control frameworks across data centers and multiple clouds.
• Implement defense-in-depth controls across IaaS, PaaS, containers, and IAM.
• Lead threat modeling and architecture reviews to mitigate risks.
• Embed automated security scanning and policy-as-code into CI/CD.
• Build scalable IaC frameworks to enforce baselines and reduce drift.
• Shift security left with engineering and business teams.
• Advance control maturity with automation and efficiency roadmaps.
• Design cloud network security controls and centralized logging.

Skills

Cloud security

Threat modeling

Automation

Policy-as-Code

Security frameworks

Tools

Python

Go

CI/CD pipelines

Job description

TikTok Inc. seeks a Security Architect within the Global Security Organization to design and mature cloud security architecture across hybrid/multi-cloud environments and data centers.

You will implement defense-in-depth controls and validate them aligned with security policies and regulations. Responsibilities include threat modeling, CI/CD security integration, and building scalable IaC to enforce baselines, while collaborating with engineering and business teams to elevate security maturity