Senior Cloud Security Architect: Zero Trust Focus

Alvarez & Marsal; Chicago (IL); On-site; USD 140,000 - 190,000; Full time

Job summary

Alvarez & Marsal is seeking a Senior Associate in Cloud Security Architecture to help clients design, assess, and strengthen security across cloud and hybrid environments. You will collaborate with CISOs, cloud engineers, and deal teams to translate complex findings into pragmatic roadmaps and prioritized actions.

You will lead reviews of cloud configurations, evaluate IAM, encryption, logging, and security controls, and contribute to incident response and resilience efforts.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; 4–7 years in cloud security, architecture, or engineering.
• At least one active cloud certification (AWS/Azure/GCP) or equivalent.
• Hands-on experience designing and securing production workloads on major cloud platforms.

Responsibilities

• Lead cloud security architecture reviews across AWS, Azure, and Google Cloud, benchmarking against CIS, CSA CCM, NIST, and security pillars.
• Design zero‑trust architectures and maturity roadmaps for identities, devices, networks, applications, and data.
• Map cloud controls to compliance requirements (NIST, ISO 27001, SOC 2, PCI DSS, HIPAA) and translate findings into executive‑level recommendations.

Skills

Cloud security architecture

Zero trust

DevSecOps

IAM & access management

Infrastructure as code

Narrative reporting to execs

Education

Bachelor's degree in Computer Science or related field

Active cloud certification (AWS/Azure/GCP)

Tools

Terraform

CI/CD security

Kubernetes security

Job description

Alvarez & Marsal is seeking a Senior Associate in Cloud Security Architecture to help clients design, assess, and strengthen security across cloud and hybrid environments. You will collaborate with CISOs, cloud engineers, and deal teams to translate complex findings into pragmatic roadmaps and prioritized actions.

You will lead reviews of cloud configurations, evaluate IAM, encryption, logging, and security controls, and contribute to incident response and resilience efforts.