Principal Cloud Security Architect

JOB TITLE: Principal Cloud Security Architect
JOB LOCATION: Waltham, MA/Remote 90% (Onsite once per quarter)
WAGE RANGE: Full time 167-210K Full Time (based on experience and location)
JOB NUMBER: NGGJP00016848

This position can be located in Brooklyn, NY, Hicksville, NY, or Waltham, MA

Downstate NY $179,000 - $210,000 a year
Massachusetts $167,000 - $196,000 a year
Salary is commensurate with experience and location

REQUIRED EXPERIENCE:
Cloud Security Experience

JOB DESCRIPTION

Principal Cloud Security Architect.

We want to find an innovative, adaptable, and results-oriented Principal Cloud Security Architect for our Cybersecurity team.

As a Principal Cloud Security Architect, youll design, implement, and maintain a robust security architecture across *s cloud infrastructure in Azure, AWS, GCP, as well as its large PaaS and SaaS footprints. Youll proactively identify security gaps, define security standards, and lead the remediation of security risks to deliver continuous improvement initiatives and to ensure compliance with industry regulations and best practices. Youll also combine excellent relationship and collaboration skills, deep technical knowledge and hands-on experience with major cloud providers and emerging cloud security technologies, proficiency with DevOps and automation, and a practical approach to real-world risk reduction to solve complex security problems. Additionally, you will:

Design and implement secure cloud infrastructure configurations including network segmentation, access controls, and account architecture
Assist with the selection, and lead the implementation of security solutions across Azure, AWS, and other major cloud providers
Develop, implement, and socialize technical patterns, standards and guidance for cloud infrastructure and applications
Monitor cloud security posture and conduct regular security assessments and risk analysis to identify vulnerabilities and prioritize remediation efforts
Automate security policies and workflows using scripting languages and cloud native security tools to improve efficiency and scalability
Assist with incident response activities for cloud-related security incidents, including investigation, containment, remediation, and post-mortem analysis
Collaborate with cross-functional teams (Business project teams, Cloud Center of Excellence, DevOps, Engineering, Compliance) to integrate security practices into cloud deployments

About you
Exceptional interpersonal and communication skills with the proven ability to build strong relationships with diverse IT and business stakeholders.
Deep understanding of cloud security concepts, including network security, data protection, identity management, and threat modeling across major cloud providers.
Extensive hands-on experience with Azure, AWS, GCP and other major cloud providers and security tools and technologies (Azure Security Center, AWS Security Hub, GCP Security Command Center, CNAPP tools, etc.).
Strong security foundations to include experience with network security, vulnerability management, penetration testing, security operations, and application security; fundamental security concepts such as encryption, secure protocols and best in class solutions.
Proficiency in scripting languages (Python, PowerShell) for automation and security orchestration.
Familiarity with ICS/SCADA/OT environments and architecture, along with industry-relevant standards such as NIST, CIS benchmarks, CSA CCM, and NERC CIP.

Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities

While an hourly range is posted for this position, an eventual hourly rate is determined by a comprehensive salary analysis which considers multiple factors including but not limited to: job-related knowledge, skills and qualifications, education and experience as compared to others in the organization doing substantially similar work, if applicable, and market and business considerations. Benefits offered include medical, dental and vision benefits; dependent care flexible spending account; 401(k) plan; voluntary life/short term disability/whole life/term life/accident and critical illness coverage; employee assistance program; sick leave in accordance with regulation. Benefits may be subject to generally applicable eligibility, waiting period, contribution, and other requirements and conditions. Benefits offered are in accordance with applicable federal, state, and local laws and subject to change at TCMs discretion.PDN-a075bd01-f042-42f0-8bfe-a581cf6f9dae