Senior Cloud Security Architect | Zero Trust & DevSecOps

Alvarez & Marsal; Boston (MA); On-site; USD 140,000 - 200,000; Full time

Job summary

Alvarez & Marsal is seeking a Senior Associate to advance cloud security architecture across multi-cloud environments. You will assess, design, and implement secure cloud architectures, enforce zero trust patterns, and translate technical findings into pragmatic roadmaps for clients.

You will collaborate with CISOs, cloud engineers, and deal teams to drive secure outcomes. Join a team that blends regulatory awareness with practical, vendor-agnostic guidance, supporting M&A due diligence and

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• At least one active professional-level cloud certification is required.
• Hands-on experience securing production workloads in AWS, Azure, or GCP.
• Familiarity with NIST, ISO 27001, CIS Controls, HIPAA or PCI DSS is preferred.

Responsibilities

• Lead cloud security architecture reviews and cloud configuration assessments.
• Design zero trust architectures and prioritized roadmaps.
• Map controls to compliance frameworks and advise on cloud security.
• Review infrastructure-as-code, CI/CD pipelines, and container/Kubernetes security.
• Develop executive-grade deliverables and mentor junior team members.

Skills

Cloud security

Cloud architecture

DevSecOps

Infrastructure as code

CI/CD security

Risk assessment

Communication

Problem solving

Education

Bachelor’s degree in CS/IS or related field

Tools

AWS Solutions Architect

Azure Architect

Google Cloud Architect

Job description

Alvarez & Marsal is seeking a Senior Associate to advance cloud security architecture across multi-cloud environments. You will assess, design, and implement secure cloud architectures, enforce zero trust patterns, and translate technical findings into pragmatic roadmaps for clients.

You will collaborate with CISOs, cloud engineers, and deal teams to drive secure outcomes. Join a team that blends regulatory awareness with practical, vendor-agnostic guidance, supporting M&A due diligence and