Senior Cloud Security Architect

CMK Resources, Inc.; Milpitas (CA); Hybrid; USD 170,000 - 210,000; Full time

Job summary

CMK Resources, Inc. is a global technology organization seeking a Senior Cloud Security Architect to strengthen and mature its multi-cloud environment across Azure, AWS, and GCP. The role will define security architecture, guardrails, and secure design patterns while collaborating with an internal cloud architect.

The position is based in California with a mix of onsite work; the architect will contribute to architecture reviews and future-state planning as the cloud security program evolves.

Qualifications

• Deep Azure cloud security architecture experience.
• Experience securing AWS environments.
• Strong hands-on Terraform experience.
• Ability to evaluate and improve an existing cloud environment.
• Experience with cloud identity, data protection, and infrastructure security.
• Knowledge of CNAPP, CSPM, or cloud workload protection technologies.
• Strong communication and cross-functional architecture skills.

Responsibilities

• Design and improve security architecture across Azure, AWS, and GCP.
• Establish cloud security standards, guardrails, and reference architectures.
• Help architect the next phase of the organization’s cloud environment.
• Use Terraform to implement and automate cloud security controls.
• Review cloud infrastructure, identity, data protection, and workload security.
• Support the continued implementation and optimization of Wiz.
• Participate in architecture reviews and provide security recommendations.
• Partner with cloud, application, ERP, AI, and engineering teams.
• Translate security risks into practical, scalable controls.

Skills

Azure security

AWS security

Terraform

Cloud security architecture

CNAPP/CSPM

Cross-functional communication

Tools

Terraform

Wiz

Job description

CMK Resources is seeking a Senior Cloud Security Architect to support a global technology organization in strengthening and maturing its multi-cloud environment. This person will help define cloud security architecture, guardrails, and secure design patterns across Azure, AWS, and GCP.

The environment is primarily Azure, with some AWS and GCP used for storage. This isn't a greenfield build, but the cloud security program is still evolving. The architect will work alongside an internal cloud architect and contribute expertise to architecture reviews and future-state planning.

Location: Milpitas, CA or Irvine, CA - 4 days a week onsite

Responsibilities

• Design and improve security architecture across Azure, AWS, and GCP
• Establish cloud security standards, guardrails, and reference architectures
• Help architect the next phase of the organization’s cloud environment
• Use Terraform to implement and automate cloud security controls
• Review cloud infrastructure, identity, data protection, and workload security
• Support the continued implementation and optimization of Wiz
• Participate in architecture reviews and provide security recommendations
• Partner with cloud, application, ERP, AI, and engineering teams
• Translate security risks into practical, scalable controls

Required Qualifications

• Deep Azure cloud security architecture experience
• Experience securing AWS environments
• Strong hands-on Terraform experience
• Ability to evaluate and improve an existing cloud environment
• Experience with cloud identity, data protection, and infrastructure security
• Knowledge of CNAPP, CSPM, or cloud workload protection technologies
• Strong communication and cross-functional architecture skills

Preferred Qualifications

• Experience with Microsoft Defender, CrowdStrike, Orca, or another CNAPP platform