Senior Cloud Security Architect

Compunnel, Inc.; New York (NY); On-site; USD 130,000 - 160,000; Full time

Job summary

A cloud security solutions provider is seeking a Senior Cloud Security Architect to design and implement cloud security capabilities across various environments. The role involves managing cloud security tools, ensuring compliance with industry standards, and collaborating with engineering teams to enhance security posture. Ideal candidates will have over 5 years of experience in cloud security, hands-on experience with major cloud platforms, and a strong understanding of cloud security tools. Certifications in cloud security are preferred.

Qualifications

• 5+ years of experience in cloud security engineering.
• Hands-on experience with major cloud platforms (AWS, Azure, GCP).
• Strong understanding of cloud security tools including CSPM, CWP, and CNAPP.

Responsibilities

• Design and implement monitoring processes for cloud security.
• Manage IAM operations and integrate security tooling.
• Develop scripts for extract and transform security data.

Skills

Cloud security engineering

Hands-on experience with AWS, Azure, GCP

Understanding of CSPM, CWP, CNAPP

Analytical and problem-solving skills

Job description

The Sr. Cloud Security Architect is responsible for designing, implementing, and supporting cloud security capabilities across IaaS, PaaS, and SaaS environments.

The role focuses on managing cloud security tooling, ensuring comprehensive coverage of security platforms, implementing monitoring and reporting processes, and collaborating with engineering teams to enhance the organization’s cloud security posture.

This individual provides expert-level guidance on cloud security risks, ensures compliance with industry standards, and supports automation to improve operational efficiency.

Key Responsibilities

Security Tooling

• Perform BAU operational activities for cloud security tooling across cloud and SaaS platforms.
• Maintain full coverage of CNAPP and SSPM solutions across cloud platforms, workloads, and SaaS applications.
• Manage IAM operations for cloud security tooling including RBAC, group administration, and JML processes.
• Integrate and enhance security tooling to align with evolving business and compliance requirements.
• Support deployment of security capabilities across Kubernetes clusters using Helm, Kubernetes, and YAML.

Security Monitoring

• Design and implement monitoring processes to detect, analyze, and respond to cloud security threats.
• Monitor tooling for misconfigurations, vulnerabilities, and compliance gaps, ensuring timely remediation with business partners.
• Provide expert-level consultation to stakeholders on cloud security risks and recommend remediation or compensating controls when necessary.
• Assess operational impacts of configuration changes and communicate implications for business continuity.
• Document cloud security risk statements to support tracking and remediation.
• Collaborate with engineering and application teams to resolve issues and improve cloud security posture.

Security Reporting & Development

• Develop scripts to extract and transform security data via APIs.
• Generate scheduled and ad-hoc reporting that highlights key risks, trends, and remediation progress.
• Build dashboards using BI tools such as Power BI to visualize cloud security posture.
• Identify opportunities to automate processes and leverage analytics for improved risk visibility and operational efficiency.

Required Qualifications

• 5+ years of experience in cloud security engineering.
• Hands-on experience with major cloud platforms (AWS, Azure, GCP).
• Strong understanding of cloud security tools including CSPM, CWP, and CNAPP.
• Deep knowledge of cloud-native security controls, compliance frameworks, and best practices.
• Strong analytical and problem‑solving skills.

Preferred Qualifications

• Experience in cloud security operations across enterprise environments.
• Hands‑on scripting experience for automation and reporting.
• Experience with Kubernetes‑related security operations.

Certifications

• CISSP
• CCSP
• Cloud security certifications such as AWS‑SCS, AZ‑500, or GCP PCSE