Senior Cloud Security Architect – CNAPP & Multi-Cloud

Estuate, Inc.; Houston (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Estuate, Inc. seeks a Sr. Cloud Security SME to design cloud security architecture and deploy CNAPP platforms across a multi-cloud enterprise. You will guide cross-functional teams in a large-scale environment and oversee security controls in AWS, GCP, and other cloud services.

The role emphasizes hands-on CNAPP deployment, policy governance, and executive-focused documentation to drive secure cloud initiatives across business units.

Qualifications

• 7+ years in cloud security; 3+ years in SME/architecture roles.
• Hands-on Upwind, Wiz, or Prisma Cloud deployment experience.
• Deep expertise in AWS (IAM, GuardDuty, S3, CloudTrail) and Google Cloud Platform (SCC, VPC Service Controls).
• Strong CSPM and agentless/eBPF sensor deployment experience.
• Familiarity with NERC CIP, NIST 800-53, or CIS controls.
• Experience producing executive-level architecture and governance documentation.

Responsibilities

• Design cloud security architecture across AWS, GCP, and Azure.
• Deploy and manage CNAPP platforms and RBAC/SSO configurations.
• Govern S3 bucket security and IAM least-privilege models.
• Integrate CNAPP with CrowdStrike, Tenable, and SIEM/SOAR tooling.
• Drive vulnerability prioritization by aligning runtime context with findings.
• Define and maintain RBAC frameworks and governance workflows.
• Mentor security teams across VM, App Sec, SOC, and BU.

Skills

Cloud security

Architecture leadership

CNAPP deployment

AWS

Google Cloud Platform

CSPM

RBAC/SSO config

Executive documentation

Education

CCSP / CISSP / AWS Security Specialty

Job description

Estuate, Inc. seeks a Sr. Cloud Security SME to design cloud security architecture and deploy CNAPP platforms across a multi-cloud enterprise. You will guide cross-functional teams in a large-scale environment and oversee security controls in AWS, GCP, and other cloud services.

The role emphasizes hands-on CNAPP deployment, policy governance, and executive-focused documentation to drive secure cloud initiatives across business units.