Sr Cloud Security Architect-GCP

H-E-B; Austin (TX); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Base pay + Bonus

Job summary

H-E-B is looking for a Cloud Security Architect to design and implement cloud security architecture. This hybrid role based in Austin, Dallas, or San Antonio requires over 7 years of experience in complex solutions, along with 5+ years in hybrid cloud environments and 3+ in information security. Responsibilities include providing guidance on best practices, designing security controls, and creating architecture documentation. Applicants should have strong proficiency in Google Cloud Platform and relevant tools like Terraform and Ansible.

Qualifications

• 7+ years of experience with designing and implementing complex solutions.
• 5+ years of experience in public or hybrid cloud environments.
• 3+ years of experience in information security.

Responsibilities

• Guidance on industry best practices for cloud security.
• Design security controls and improve infrastructure.
• Create best-of-class security architecture designs.

Skills

Experience with Google Cloud Platform

Working knowledge of Terraform

Solid understanding of web applications

Proficiency with cloud resources

Experience with information security controls

Familiarity with Agile methodologies

Ability to work well under pressure

Education

Bachelor’s degree in Computer Science or Software Engineering

Tools

Terraform

Cloud Formation

Ansible

Job description

About the Role

Cloud Security Architects create and drive the architecture and design patterns for H-E-B’s cloud security architecture, for both hybrid and cloud-first models. They perform analysis of existing cloud security and ancillary service configurations, design and create new or enhanced security improvements. They also provide consultative services and work with internal business team members and external vendors to collect requirements, design specifications, and create solutions that are aligned with H-E-B cloud security strategy.

Responsibilities

• Serves as a subject matter expert for cloud security, providing guidance on industry best practices and defense-in-depth strategies for the security posture of H-E-B cloud-based digital platforms.
• Works with project teams to measure the testing and evaluation of new solutions ensuring satisfaction of H-E-B security requirements.
• Works with internal Information Systems teams to design security controls and improve cloud security infrastructure to support business/engineering needs.
• Creates best-of-class security architecture designs and patterns for H-E-B, using defensible industry reference architectures and standards.
• Works to measure and design tests of cloud configurations and infrastructure for vulnerabilities and security relevant defects.
• Works to ensure all cloud infrastructure designs and implementations follow security and compliance control requirements, and to resolve any configuration gaps or defects through collaboration with respective stakeholders.
• Designs, develops, documents, automates, and implements security infrastructure in code.
• Creates and maintains security architecture specifications and design documentation.
• Supports setting the strategic security direction and approach for utilizing cloud-relevant technologies.

Qualifications

• 7+ years of experience with the design and implementation of complex solutions in medium to large enterprises.
• 5+ years of experience building and integrating systems in public or hybrid cloud environments.
• 3+ years of experience with information security.

Required Skills

• Experience with Google Cloud Platform and preferred working knowledge of the security tools and practices offered by the platforms.
• Working knowledge of Terraform, Cloud Formation, Azure ARM Template, Pulumi, and/or Ansible with demonstrable proficiency with at least one.
• Solid understanding of web applications, web servers, application firewalls, frameworks and protocols with respect to web application development, deployment, and operation in the cloud.
• Proficiency with cloud resources such as virtual networking, access controls (security groups and ACLs), service endpoints, application and network load balancing, API gateways, service meshes, service principals, functions/serverless, storage buckets, containers, block storage and file shares.
• Working knowledge of information security controls, guidelines and standards (e.g., ISO27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOC 2, and NIST).
• Experience and at least basic understanding of privacy and data protection regulations (e.g., PCI DSS and HIPAA/HITECH).
• Proficiency with secrets management and vaulting technologies.
• Familiarity with Agile and other project methodologies.
• Ability to work well under pressure and have great organizational and interpersonal skills.
• Familiarity with CSPM/CNAPP.

Preferred Skills

• A Bachelor’s degree in Computer Science or Software Engineering.
• One or more professional security certifications such as CISSP, CISA, CEH, GIAC; and cloud certifications from AWS, Azure and/or GCP.
• Experience with cloud security tools for discovery, compliance, and vulnerability detection.

Pay range and compensation package

Base pay + Bonus

Location

Austin, Dallas or San Antonio, TX (hybrid role; will be asked to come into the office for meetings, town halls, sprints etc.)