Senior Cloud Security Architect — Multi-Cloud & IaC

TikTok; San Jose (CA); On-site; USD 134,000 - 223,000; Full time

Job summary

TikTok's Global Security Organization (GSO) seeks a security architecture lead to own control frameworks across data centers and multiple cloud providers (OCI, AWS, Azure, GCP). You will embed automated security scanning, policy-as-code, and validation into CI/CD, driving maturity through metrics and a roadmap focused on automation and efficiency.

The role requires deep cloud security experience, threat modeling, and collaboration with engineering, infrastructure, and business teams to shift

Qualifications

• Experience designing security controls across Hybrid/Multi-Cloud environments.
• Hands-on with CSPM, CNAPP, CASB, DLP.
• Ability to automate security validation and control implementations.
• Familiarity with NIST CSF, ISO 27001, GDPR, SOX.

Responsibilities

• Own security architecture and control frameworks across hybrid/multi-cloud environments.
• Implement defense-in-depth controls for IaaS, PaaS, containers, IAM.
• Lead threat modeling and architecture reviews to mitigate risks.
• Embed policy-as-code and automated validation into CI/CD pipelines.
• Develop scalable IaC frameworks to enforce security baselines.

Skills

Security controls

Hybrid/Multi-Cloud

Threat modeling

Automation/scripting

Regulatory compliance

5 days in office

Education

Master's degree or relevant certs

Tools

Cloud security tooling (CSPM/CNAPP/CASB/DLP)

Python/Go for security tooling

Infrastructure as Code (IaC)

Job description

TikTok's Global Security Organization (GSO) seeks a security architecture lead to own control frameworks across data centers and multiple cloud providers (OCI, AWS, Azure, GCP). You will embed automated security scanning, policy-as-code, and validation into CI/CD, driving maturity through metrics and a roadmap focused on automation and efficiency.

The role requires deep cloud security experience, threat modeling, and collaboration with engineering, infrastructure, and business teams to shift