Strategic Cloud Security Architect — DevSecOps Leader

CliftonLarsonAllen LLP; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

CliftonLarsonAllen LLP is seeking an Application Security Architect to bridge application security with cloud and DevOps. You will lead secure design reviews, assess data flows, and define controls across CI/CD pipelines, IaC, containers, and cloud environments.

The role focuses on establishing a Cloud Security Posture Management practice and coordinating governance across multiple teams to ensure secure development workflows.

Qualifications

• Experience leading or supporting secure design reviews for application, cloud, and hybrid solutions.
• Experience reviewing architecture, system interaction, and data-flow diagrams.
• Knowledge of CI/CD pipelines, GitHub Actions, infrastructure as code, containers, and software supply-chain security.
• Ability to communicate risks and security requirements to technical and non-technical stakeholders.

Responsibilities

• Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions.
• Document identified risks, mitigations, risk owners, exceptions, and residual-risk decisions.
• Review system interaction diagrams and data-flow diagrams to identify risks and controls.
• Develop reusable security standards, baselines, and architectural guidance.
• Establish a Cloud Security Posture Management practice coordinating people, processes, and technology.
• Provide technical security leadership across Development, Cloud, Platform, Product, Data, IT, EA, and Risk teams.

Skills

Application security architecture

Cloud security

DevOps security

Security engineering

CI/CD pipelines

GitHub Actions

Infrastructure as code

Container security

Software supply chain security

Stakeholder communication

Education

Bachelor's degree

Tools

Black Duck Polaris

Job description

CliftonLarsonAllen LLP is seeking an Application Security Architect to bridge application security with cloud and DevOps. You will lead secure design reviews, assess data flows, and define controls across CI/CD pipelines, IaC, containers, and cloud environments.

The role focuses on establishing a Cloud Security Posture Management practice and coordinating governance across multiple teams to ensure secure development workflows.