Sr. Cloud Security Architect | CNAPP/CSPM/Presales (Remote)

Trace3

Atlanta (GA)

Remote

USD 185,000 - 240,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Comprehensive medical, dental and vision plans

401(k) Retirement Plan with Employer Match

Competitive Compensation

Training and development programs

Work-life balance and generous paid time off

Work-life balance

Generous paid time off

Job summary

A leading cloud security firm is seeking a Sr. Cloud Security Architect to act as a technical lead in pre-sales engagements. You will utilize your cloud security expertise across AWS, Azure, and GCP to design secure multi-cloud environments. Your role includes collaborating with account teams and providing solutions that align with customer security strategies. Ideal candidates have extensive experience in cloud environments and proficiency in CNAPP/CSPM tools.

Qualifications

7+ years in cloud security, cloud architecture, or security engineering.
Strong knowledge of AWS, Azure, and GCP security models.
Experience with CNAPP/CSPM platforms.

Responsibilities

Act as the technical lead during pre-sales engagements.
Partner with account teams to align security strategies.
Lead discovery sessions to uncover challenges.

Skills

Cloud security expertise

Technical problem-solving

Communication skills

Business value translation

Security architecture

Communication to executives

Education

Bachelor's degree in Cybersecurity or related field

AWS Solutions Architect Professional

Azure Solutions Architect Expert

GCP Professional Cloud Architect

CISSP or other advanced security certifications

Tools

Wiz

Sysdig

Orca

Prisma Cloud

Lacework

Job description

Sr. Cloud Security Architect | CNAPP/CSPM/Presales (Remote)

We are looking for a former hands-on cloud security practitioner ready to take technical expertise into a client-facing pre-sales role. This position is for a Subject Matter Expert (SME) in cloud security covering AWS, Azure, and GCP, who can help our sales organization understand customer pain points and guide them toward secure, scalable solutions. As a Sr. Cloud Security Architect, you will partner with account executives throughout the sales cycle, from discovery and solution design to proposal support and technical validation. You’ll engage with customer architects, engineers, and executives to assess cloud security posture, design well-architected multi-cloud solutions, and position leading security platforms such as Wiz, Sysdig, Orca, and other CNAPP/CSPM tools.

If you’ve been a practitioner securing cloud environments and are now ready to move into a role that blends technical depth with business impact, this role is for you.

Ideal Candidate

You are a cloud security practitioner at heart who thrives in technical problem-solving but is ready to step into a role where you can influence strategy and shape solutions before they’re built. You have spent years securing AWS, Azure, and/or GCP environments, are comfortable with frameworks like CIS and NIST, and have worked hands-on with CNAPP or CSPM platforms such as Wiz, Sysdig, or Orca. You excel at explaining technical concepts to both engineers and executives, and you enjoy guiding organizations toward secure cloud adoption. Most importantly, you’re eager to transition your expertise into pre-sales engagements, becoming the trusted advisor who connects business needs with the right security solutions.

Key Responsibilities

Act as the technical lead and cloud security SME during pre-sales engagements.
Partner with account teams to align security strategies with customer priorities, risk posture, and compliance requirements.
Lead discovery sessions, workshops, and executive briefings to uncover challenges and shape solution strategy.
Present cloud security platforms (e.g., Wiz, Sysdig, Orca) in competitive pre-sales environments.
Contribute to proposals, RFP responses, and reference architectures that support sales opportunities.
Partner with vendor relationships to help drive successful outcomes.

Cloud Security Architecture

Design and articulate secure, well-architected multi-cloud environments across AWS, Azure, and GCP.
Recommend architectures leveraging CNAPP, CSPM, CWPP, and CIEM solutions to improve security posture.
Guide secure configuration and hardening of IaaS, PaaS, and SaaS resources, focusing on identity, networking, and workload protection.
Apply frameworks like CIS Benchmarks, NIST 800-53, CSA CCM, and cloud provider well-architected frameworks.
Evaluate customer environments to identify misconfigurations, over-permissioned roles, and exposed services.
Recommend remediation strategies that balance security requirements with operational realities.
Map technical findings to business outcomes, helping customers understand ROI and risk reduction.
Work closely with delivery and partner teams to ensure solutions are scoped for successful implementation.
Provide internal enablement for sales and technical teams on emerging cloud security capabilities.

Qualifications

Education & Certifications (Preferred)

Bachelor’s degree in Cybersecurity, Computer Science, or related field—or equivalent experience.
Relevant cloud certifications such as:
AWS Solutions Architect Professional or Security Specialty
Azure Solutions Architect Expert or Security Engineer Associate
GCP Professional Cloud Architect or Security Engineer
CISSP or other advanced security certifications a plus.

Experience

7+ years in cloud security, cloud architecture, or security engineering—preferably in a practitioner role.
Strong working knowledge of AWS, Azure, and GCP security models, controls, and best practices.
Hands-on experience with one or more CNAPP/CSPM platforms (Wiz, Sysdig, Orca, Prisma Cloud, Lacework, etc.).
Experience applying cloud security frameworks (CIS, NIST, CSA) and conducting well-architected reviews.
Comfort interacting with technical and executive stakeholders in pre-sales settings.

Skills

Ability to translate technical risks into clear business value.
Proficiency in secure cloud networking, IAM hardening, encryption strategies, and centralized monitoring/logging.
Knowledge of container and Kubernetes security best practices.
Strong presentation, communication, and solution-selling skills.

Why This Role?

This is your opportunity to bring your cloud security practitioner expertise to a pre-sales leadership role where you’ll influence strategy, shape solutions, and help clients achieve secure cloud adoption. You’ll work with cutting-edge platforms, collaborate with top-tier partners, and be the trusted technical voice in the room.

Actual salary will be based on a variety of factors, including location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base salary.

The Perks

Comprehensive medical, dental and vision plans for you and your dependents
401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability
Competitive Compensation
Training and development programs
Stocked kitchen with snacks and beverages
Collaborative and cool culture
Work-life balance and generous paid time off

Our Commitment

At the core of Trace3's DNA is our people. We are a diverse group of talented individuals who understand the importance of teamwork and demonstrating leadership, character, and passion in all that we do.

We’re committed to fostering an inclusive workplace where everyone feels respected, valued, and empowered to grow. We recognize that embracing diversity drives innovation, improves outcomes, fosters collaboration, boosts teammate satisfaction, and builds a more inclusive culture.

As an equal opportunity employer, Trace3 bases all employment decisions based on individual qualifications, merit, and business requirements. We do not engage in discrimination on the basis of race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or any other characteristic protected by federal, state, or local law.

Any demographic information provided is strictly voluntary, kept confidential in accordance with Equal Employment Opportunity (EEO) regulations, and will not be used in employment decisions, including hiring, promotions, or mentorship programs. We are committed to providing equal employment opportunities for all.

If you require a reasonable accommodation to complete the application process or participate in an interview, please email recruiting at trace3 dot com.

***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.

Seniority level