Cloud Architect Lead III

Indotronix International Corporation•Louisville, KY

6d•Hybrid

About The Position

The Cloud Architect Lead III is a hands-on cloud security architecture and automation role within the Cybersecurity organization. Working closely with Cloud Engineering, this position secures and configures cloud infrastructure across Azure, AWS, GCP, and other cloud service providers. The role includes developing Azure cloud automation with the WIZ platform, monitoring and managing cybersecurity technology in cloud environments, and contributing to cloud security strategy. The position provides expert guidance, conducts security assessments, and designs and implements secure cloud architectures, with emphasis on secure configurations, container security, and cloud incident response. This is a hybrid role for candidates residing within the service areas of Pennsylvania, Rhode Island, and Kentucky. Office attendance is Tuesday, Wednesday, and Thursday. The reporting office is determined by the candidate’s residence: 220 W. Main St., Louisville, KY 40202; 645 Hamilton St., Allentown, PA 18101; or 1595 Mendon Road, Cumberland, RI 02864. WIZ experience is required.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field, or an equivalent combination of education and experience on a year-for-year basis.
At least 10 years of direct cybersecurity or cloud security/automation infrastructure-as-code policy experience configuring and supporting cloud applications and infrastructure.
WIZ experience; experience developing Azure cloud automation code with the WIZ platform is required.
Experience configuring and supporting Microsoft 365 services, including Microsoft Endpoint Manager (Intune and Configuration Manager), Microsoft Defender for Cloud, and Microsoft Identity and Access services (Microsoft 365, Active Directory/Entra, and ADFS).
Understanding of modern cloud technology components and deployment patterns, including virtual machines, containers, Kubernetes, serverless, and infrastructure as code.
Demonstrated knowledge of Azure architecture and core services, including Virtual Machines, Group Policy, MFA, Azure Active Directory, Management Groups, Resource Groups, Azure Regions, Azure Functions, Azure Networking, Azure IPsec Connections, Network Security Groups, Azure VDI, and Firewalls.
Experience with DevOps and building CI/CD pipelines for application and infrastructure deployments.
Scripting skills in languages or tools such as Python, infrastructure-as-code technologies, PowerShell, or Azure CLI for automation.
Knowledge of network architectures, including VNETs, subnets, VPNs, and ExpressRoute, and Azure security features such as Azure Active Directory, Network Security Groups, and Azure Key Vault.
Strong leadership, communication, and interpersonal skills.
Ability to collaborate effectively in cross-functional teams.
Strong analytical skills to assess risks and vulnerabilities in complex systems.

Nice To Haves

Knowledge of programming languages such as Python, .NET, or Java.
Working knowledge of enterprise technology stacks used to build cloud services.
Practical experience with security testing within cloud platforms, particularly Azure.
Proficiency in scripting and automation for security testing.
Knowledge of Azure configuration best practices.
Certifications such as M365 Security, Microsoft Azure Administrator Associate (AZ-104), Microsoft Azure Network Engineer Associate, or Microsoft Azure Security Engineer Associate (AZ-500).

Responsibilities

Design and implement secure cloud architectures across AWS, Azure, and GCP.
Develop Azure cloud automation code using the WIZ platform.
Use the DevOps toolchain to run infrastructure-as-code automations through WIZ or GitHub.
Conduct regular security assessments and ensure compliance with frameworks such as NIST and CIS.
Lead cloud-environment incident response and contribute to tabletop exercises.
Collaborate with developers and DevOps teams to promote secure CI/CD and infrastructure-as-code practices.
Ensure user access and privileged account management for cloud resources align with industry best practices and frameworks.
Provide input to GRC teams on cloud security policies and IAM standards.
Review cloud architecture, infrastructure, and applications for security; identify gaps, develop a security risk management plan, and execute risk mitigation strategies.
Manage CSPM and container security technologies hands-on.
Serve as a subject matter expert on cloud security practices, emerging technologies, and the evolving threat landscape.
Identify strategies to optimize resource utilization and minimize cost.
Guide, coach, and support junior staff members.
Perform other duties as assigned and comply with all policies and standards.