Azure Security

JD

Azure Security L2 L3

Cloud Security Architect - Multi-Cloud Environment (AWS, Azure, GCP)

Position Overview

We are seeking an experienced Cloud Security Architect to design, implement, and maintain comprehensive security controls across our multi-cloud infrastructure spanning AWS, Azure, and Google Cloud Platform (GCP). This role combines strategic security architecture with hands-on operational responsibilities to ensure robust security posture across all cloud environments.

Key Responsibilities

Security Architecture and Controls

• Design and propose innovative security controls to enhance overall security posture across AWS, Azure, and GCP environments
• Continuously improve existing security controls and configurations in multi-cloud deployments
• Maintain comprehensive security architecture documentation and ensuring accuracy and accessibility

Security Assessment and Baseline Management

• Conduct annual security baseline reviews across all cloud platforms (AWS, Azure, GCP)
• Identify, implement, and manage security controls including new implementations, modifications to existing settings, and removal of obsolete controls to address emerging threats
• Analyze monthly security baseline reports and collaborate with reporting teams to eliminate false positives
• Update non-compliance status within security baseline governance frameworks, including risk identification and target remediation dates
• Proactively perform security assessments to identify gaps in multi-cloud environments and escalate security incidents appropriately

Compliance Management

• Develop comprehensive action plans for addressing non-compliance issues across cloud platforms
• Assign and coordinate team responsibilities for remediation activities
• Partner with AWS, Azure, and GCP service providers to assess environments against industry security best practices
• Transform identified security gaps into actionable remediation items with clear timelines

Security Testing and Validation

• Own and manage the penetration testing process across all cloud environments (coordinating with external vendors)
• Ensure all prerequisites are met for vendor-conducted security testing
• Track, validate, and ensure timely closure of penetration test findings across AWS, Azure, and GCP

Access and Policy Management

• Review and approve firewall requests for multi-cloud environments
• Evaluate and approve proxy requests across cloud platforms
• Review and approve RACI matrices for services involving cloud security architecture
• Assess and approve security policy changes including AWS Service Control Policies, Azure policies, GCP IAM policies, KMS policies, and other cloud-native security configurations
• Oversee bi-annual Firewall Rule Reviews (FFR) to ensure network security compliance

Cloud Security Alert Response

• Serve as primary point of contact for CSOC team regarding cloud security alerts across all platforms
• Conduct thorough analysis of incoming security alerts from AWS, Azure, and GCP environments
• Provide contextual updates and technical insights to CSOC team on alert findings
• Investigate root causes of security incidents across multi-cloud infrastructure
• Validate alert legitimacy and implement processes to reduce false positives
• Recommend and coordinate remediation steps for identified security concerns

CNAPP Alert Response

• Review security vulnerabilities and misconfigurations detected by cloud security platforms (such as Wiz) across AWS, Azure, and GCP environments
• Validate identified security issues and eliminate false positives through technical analysis
• Document findings with comprehensive context and technical details for stakeholder communication

Risk Management

• Actively participate in Quantitative Risk Assessments (QRA) for cloud environments
• Communicate identified risks and develop actionable plans to address security concerns
• Coordinate with cloud governance teams to escalate and manage cloud security risks appropriately

Collaboration and Support

• Provide technical support to cloud operations and implementation teams across all platforms
• Address application team inquiries regarding security improvements and best practices
• Collaborate with second line of defense teams on developing and refining cloud security guidelines
• Identify opportunities for security process improvements to enhance protection and reduce operational ambiguity

Required Qualifications

• 5+ years of experience in cloud security architecture
• Hands-on experience with AWS, Azure, and Google Cloud Platform security services
• Strong understanding of cloud-native security tools and CNAPP solutions
• Experience with security frameworks and compliance standards
• Knowledge of network security, identity and access management, and encryption technologies
• Strong analytical and problem-solving skills
• Excellent communication and collaboration abilities

Preferred Qualifications

• Relevant cloud security certifications (AWS Security Specialty, Azure Security Engineer, Google Cloud Security Engineer)
• Experience with security automation and Infrastructure as Code
• Knowledge of DevSecOps practices and CI/CD security integration