Senior Cloud Security Architect - Zero Trust Leader

First American; Los Angeles (CA); Hybrid; USD 145,000 - 193,300; Full time

Benefits offered by this job

Medical, dental, vision

401(k)

PTO / Paid sick leave

Employee stock purchase plan

Job summary

First American is seeking a Senior Security Architect to lead the strategic planning, implementation, and ongoing enhancement of its security framework. You will design Zero Trust across Azure, AWS, and GCP, govern data and applications, and drive security automation in a DevSecOps model.

You will collaborate with IAM, application security, and data teams to ensure least-privilege access and compliant, secure cloud workloads.

Qualifications

• Minimum 5 years in cloud security architecture, governance, and risk management across EntraID, Azure, AWS, and GCP.
• At least 2 years designing and implementing Zero Trust security models.
• Hands-on with Microsoft Defender for Cloud and EntraID security controls.
• Strong certifications in cloud security and/or CISSP/CISM/CISA preferred.

Responsibilities

• Lead Cloud Security Architecture & Zero Trust design across multi-cloud environments (Azure, AWS, GCP).
• Develop and enforce security governance models: application security, IAM, data governance.
• Manage cloud security risk and posture with CSPM and CWPP tooling; monitor vulnerabilities and threats.
• Automate security policies and governance using IaC; integrate security into CI/CD pipelines.

Skills

Cloud security

Zero Trust

IAM

Security governance

CSPM/CWPP/SIEM

DevSecOps

Hybrid/multi-cloud

Education

Cloud security certifications (AWS/Azure/GCP)

CISSP/CISM/CISA or equivalent

Tools

Azure

AWS

GCP

Entra ID

Prisma Cloud

Kubernetes/Docker

IaC tools

Job description

First American is seeking a Senior Security Architect to lead the strategic planning, implementation, and ongoing enhancement of its security framework. You will design Zero Trust across Azure, AWS, and GCP, govern data and applications, and drive security automation in a DevSecOps model.

You will collaborate with IAM, application security, and data teams to ensure least-privilege access and compliant, secure cloud workloads.