Cloud Security Architect

Westinghouse Electric Company, LLC • Cranberry Township, PA

5d • $116,800 - $146,000 • Hybrid

About The Position

As a Cloud Security Architect, you will define, designing, and assessing secure cloud architectures that align with organizational security strategy, risk management goals, and enterprise standards. You will translate business and technical requirements into secure cloud designs and architectures within Google Cloud Platform (GCP) environments, ensuring the integration of security controls across the full lifecycle of GCP-based solutions. You will report to the Director Cybersecurity Operations and be located at Cranberry Township, PA. This is a hybrid position.

Requirements

• Bachelor's degree in IT, related technical discipline, or equivalent experience.
• Minimum of 5+ years of experience in information technology
• 3+ years in cybersecurity, cloud security, or infrastructure security roles, and at least 1–2 years of hands-on experience designing or securing solutions in Google Cloud Platform (GCP) environments.
• Experience with GCP services such as IAM, VPC, Cloud Security Command Center, Cloud Logging, KMS, and Cloud Armor.
• Experience using architecture methodologies such as SABSA, Zachman and/or TOGAF.
• Experience implementing centralized logging, SIEM integration, and security monitoring solutions.
• Familiarity with vulnerability management, container/Kubernetes security (e.g., GKE), and endpoint protection (AV/EDR)
• Knowledge of infrastructure-as-code (Terraform) and DevSecOps practices.

Responsibilities

• Develop and implement secure cloud architectures across GCP services, ensuring understanding of enterprise security standards, regulatory requirements, and risk tolerance.
• Define and document cloud security requirements and embed controls such as IAM, network segmentation, and encryption into architecture designs and cloud deployments.
• Establish and enforce centralized logging and monitoring capabilities (e.g., GCP logging, SIEM integration) to meet enterprise detection, audit, and forensic requirements.
• In collaboration with the Incident Response team, establish monitoring, alerting, and response capabilities integrated with enterprise incident response processes and guides for cloud environments.
• Lead integration and validation of endpoint protection (AV/EDR), vulnerability scanning, CSPM, and other security tools within GCP workloads.
• Design and implement a secure, best‑practice-driven container and Kubernetes framework, including full security lifecycle management.
• Support secure onboarding and monitoring of third-party providers, including MSSP access, ensuring appropriate controls, visibility, and compliance.
• Perform security assessments, threat modeling, and architecture reviews to identify gaps and recommend mitigations across cloud environments.

Benefits

• Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options
• Wellness Programs designed to support employees in maintaining their health and well-being including Employee Assistance Program providing support for our employees and their household members
• 401(k) with Company Match Contributions to support employees' retirement
• Paid Vacations and Company Holidays
• Opportunities for Flexible Work Arrangements to promote work-life balance
• Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers
• Global Recognition and Service Programs to celebrate employee accomplishments and service
• Employee Referral Program

What This Job Offers

• Job Type: Full-time
• Career Level: Senior