Senior Cloud Security Architect

System One; Knoxville (TN); On-site; USD 120,000 - 170,000; Full time

Job summary

System One seeks a Senior Cloud Security Architect to drive security across cloud environments, focusing on identity, access controls, data protection, and policy compliance.

You will partner with product, enterprise architecture, engineering, and security teams to translate threats into concrete controls, oversee AWS-centric security across IAM, networking, and serverless services, and drive risk-based remediation.

Qualifications

• Extensive experience with security architecture and threat modeling for complex enterprise applications.
• Strong knowledge of STRIDE, attack trees, abuse cases, data flow analysis, and trust boundary analysis.
• Hands-on experience evaluating security risks in AI, machine learning, and agentic AI applications.
• Advanced AWS knowledge across IAM, networking, compute, storage, RDS, messaging, serverless, ECS/EKS, CI/CD, and AI/ML services.
• Strong understanding of application security, API security, IAM, authentication, authorization, encryption, key management, and data protection.
• Experience translating identified threats into practical security controls and remediation recommendations.
• Knowledge of DevSecOps, pipeline security, container security, infrastructure security, SIEM, CSPM, and CWPP solutions.
• Familiarity with security frameworks and standards such as NIST, OWASP, CIS, FedRAMP, ISO, and SOX.
• Experience with resilient, highly available, API driven, stateless, and integrated cloud or SaaS environments.
• Ability to lead multiple initiatives and communicate effectively with technical and business stakeholders.
• This position is required in one of the following locations: Birmingham, AL, Columbia, SC, Knoxville, TN or Lafayette, LA.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• Preferred certifications include CISSP, CCSP, AWS Professional or Specialty certifications, or equivalent credentials.

Responsibilities

• The architect will work with product owners, enterprise architecture, engineering, and security teams to protect sensitive data, strengthen identity and access controls, secure cloud environments, and support compliance with enterprise policies and industry standards.
• The role requires strong AWS expertise and the ability to lead multiple security initiatives across IaaS, SaaS, and internally developed applications.

Skills

Security architecture

Threat modeling

STRIDE

Data flow analysis

Trust boundary analysis

Leadership

Communication with stakeholders

Education

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field

CISSP/CCSP or AWS Certifications preferred

Tools

AWS

IAM

Networking

Compute

Storage

RDS

CI/CD

ECS/EKS

AI/ML services

CWPP

CSPM

SIEM

FedRAMP/ISO/GIS standards

Job description

Job Title: Senior Cloud Security Architect
Location: Birmingham, AL, Columbia, SC, Knoxville, TN or Lafayette, LA
Type: Fulltime

Responsibilities

• The architect will work with product owners, enterprise architecture, engineering, and security teams to protect sensitive data, strengthen identity and access controls, secure cloud environments, and support compliance with enterprise policies and industry standards.
• The role requires strong AWS expertise and the ability to lead multiple security initiatives across IaaS, SaaS, and internally developed applications.

Requirements

• Extensive experience with security architecture and threat modeling for complex enterprise applications
• Strong knowledge of STRIDE, attack trees, abuse cases, data flow analysis, and trust boundary analysis
• Hands on experience evaluating security risks in AI, machine learning, and agentic AI applications
• Advanced AWS knowledge across IAM, networking, compute, storage, RDS, messaging, serverless, ECS/EKS, CI/CD, and AI/ML services
• Strong understanding of application security, API security, IAM, authentication, authorization, encryption, key management, and data protection
• Experience translating identified threats into practical security controls and remediation recommendations
• Knowledge of DevSecOps, pipeline security, container security, infrastructure security, SIEM, CSPM, and CWPP solutions
• Familiarity with security frameworks and standards such as NIST, OWASP, CIS, FedRAMP, ISO, and SOX
• Experience with resilient, highly available, API driven, stateless, and integrated cloud or SaaS environments
• Ability to lead multiple initiatives and communicate effectively with technical and business stakeholders
• This position is required in one of the following locations: Birmingham, AL, Columbia, SC, Knoxville, TN or Lafayette, LA
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field
• Preferred certifications include CISSP, CCSP, AWS Professional or Specialty certifications, or equivalent credentials

#LI-
Ref: #404-IT Pittsburgh