Cloud Security Architect

Job Description

Microsoft is seeking an experienced Cloud Security Architect to design, implement, and govern secure cloud architectures across Azure, AWS, and Google Cloud Platform (GCP). In this role, you will lead enterprise cloud security initiatives, define security standards, implement Zero Trust principles, and partner with engineering teams to secure cloud-native applications and infrastructure.

You will work closely with DevSecOps, platform engineering, compliance, and executive leadership to ensure cloud environments remain resilient against evolving cyber threats while meeting regulatory and business requirements. Organizations hiring for this role commonly expect expertise in multi-cloud security architecture, IAM, threat modeling, cloud governance, and security automation.

Key Responsibilities

• Design secure cloud architectures across Azure, AWS, and GCP.
• Develop enterprise cloud security strategies aligned with business objectives.
• Implement Zero Trust architecture and cloud-native security controls.
• Perform cloud threat modeling, security risk assessments, and architecture reviews.
• Secure Kubernetes, containers, serverless applications, and cloud workloads.
• Implement Identity & Access Management (IAM), Privileged Access Management (PAM), and Multi-Factor Authentication (MFA).
• Design encryption solutions using cloud-native Key Management Services (KMS) and secure secrets management.
• Integrate security into CI/CD pipelines following DevSecOps best practices.
• Configure Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP).
• Lead incident response for cloud security events and support forensic investigations.
• Ensure compliance with ISO 27001, SOC 2, NIST, PCI DSS, HIPAA, and GDPR requirements.
• Mentor cloud engineers and security teams on cloud security best practices.

Required Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or Information Technology.
• 8+ years of cybersecurity experience with at least 5 years focused on cloud security.
• Hands-on expertise with Azure, AWS, and GCP security services.
• Strong understanding of networking, IAM, encryption, PKI, firewalls, WAF, VPNs, and Zero Trust.
• Experience securing Kubernetes, Docker, Terraform, and Infrastructure as Code.
• Knowledge of SIEM, SOAR, EDR/XDR, CSPM, and CNAPP platforms.
• Strong scripting skills in Python, PowerShell, or Bash.
• Excellent analytical, communication, and leadership skills.

Preferred Certifications

• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• AWS Certified Security – Specialty
• Google Professional Cloud Security Engineer
• CISSP
• CCSK
• CCSP

Preferred Technical Skills

• Microsoft Azure Security Center
• Microsoft Defender for Cloud
• AWS Security Hub
• AWS GuardDuty
• Google Security Command Center
• Microsoft Sentinel
• Splunk Enterprise Security
• Palo Alto Prisma Cloud
• Wiz
• Orca Security
• Terraform
• Kubernetes
• Docker
• GitHub Actions
• Azure DevOps
• Jenkins

Benefits

• Competitive salary with annual performance bonus
• Restricted Stock Units (RSUs)
• Medical, dental, and vision insurance
• Flexible hybrid work model
• Paid vacation and parental leave
• Learning and certification reimbursement
• Career advancement opportunities