Cloud Cybersecurity Architect

Avnet•Chandler, AZ

2d•Hybrid

About The Position

The Cloud Security Architect is an individual contributor responsible for designing, advising, and assuring secure cloud architectures across enterprise platforms and digital initiatives. This role serves as a security subject matter expert, partnering closely with enterprise architecture, application and platform teams, cybersecurity engineering, and business stakeholders to embed security-by-design into cloud solutions. The role balances deep technical expertise with strong communication skills to enable secure, scalable cloud adoption while supporting business agility and risk-informed decision-making. As a member of the Security Architecture team, this role provides support for security architecture assessments, design efforts, and consultative activities beyond cloud services.

Requirements

Extensive experience in cloud security architecture, with strong hands-on experience in Microsoft Azure cloud environments.
Solid background in information security, architecture, or IT risk management within complex enterprise environments.
Strong understanding of security domains including identity and access management, cryptography, authentication and authorization, network security, logging and monitoring, and data protection.
Experience reviewing and advising on secure architectures for cloud platforms, applications, and integrations.
Ability to assess architectural risk and align designs to security best practices and threat models.
Strong interpersonal skills with the ability to collaborate across architecture, engineering, operations, and business teams.
Ability to clearly document and communicate architecture decisions, recommendations, and risks.
Comfortable working as an individual contributor while influencing outcomes across multiple teams.
Typically 8+ years with bachelor's or equivalent.
Bachelor's degree or equivalent experience from which comparable knowledge and job skills can be obtained.
This position will have access to ITAR product and therefore be authorized to access product. This position requires the employee to be a U.S. Citizen or National, or a lawful permanent resident as defined by 8 U.S.C. 1101(a)(20), or a protected individual as defined by 8 U.S.C. 1324b(a)(3).

Nice To Haves

Cloud or security architecture certifications (e.g., Azure, cloud security, or security architecture certifications) are preferred.
May require competency in all of the six Security competencies: Security Intelligence, Identity Management, Compliance, Secured Infrastructure, Secured Development and Security Education

Responsibilities

Design and evolve secure cloud architecture patterns across Azure and other cloud platforms, including IaaS, PaaS, containers, APIs, and serverless services.
Define and maintain cloud security reference architectures, target architectures, and reusable security patterns aligned to enterprise standards.
Provide architecture guidance for secure cloud landing zones, identity integration, network segmentation, logging, monitoring, and data protection.
Ensure cloud architectures align with enterprise security baselines, regulatory expectations, and risk posture.
Perform security architecture and design reviews for cloud-based initiatives, third-party integrations, and major platform changes.
Evaluate designs against threat models, security best practices, and acceptable risk thresholds.
Document security architecture decisions, risks, and approved deviations using architecture decision records.
Support remediation planning for identified architectural risks and control gaps.
Provide architectural guidance for cloud identity and access models, including SSO, MFA, conditional access, and privileged access.
Advise on secure use of cloud-native security services for secrets management, key management, encryption, and certificate-based authentication.
Ensure consistent application of identity, logging, and monitoring controls across cloud services.
Contribute to secure development and cloud-native application security guardrails in partnership with DevSecOps, application, and platform teams.
Support threat modeling for customer-facing platforms, APIs, and integrations.
Contribute to secure CI/CD and DevSecOps architecture patterns.
Translate security standards, policies, and control requirements into practical cloud architecture guidance.
Partner with security engineering, vulnerability management, and operations teams to address systemic weaknesses and recurring architectural gaps.
Stay current on cloud platform changes, emerging security capabilities, and evolving architectural best practices, and share guidance with delivery teams.
Contribute to the evolution of enterprise security architecture standards, roadmaps, policies, and standards.
Act as a trusted security advisor to IT and business teams, helping them understand how security architecture enables resilience, trust, and business outcomes.
Communicate complex security concepts clearly to technical and non-technical audiences.
Support risk-based decision-making by articulating trade-offs, design options, and recommended controls.