Cloud Security Architect

Gibson Dunn•Washington, DC

7d•$190,000 - $230,000

About The Position

Based in any U.S. office, the Cloud Security Architect plays a critical role on the InfoSec team, leading the design, implementation, and governance of cloud security architecture across the firm’s hybrid infrastructure. The position ensures compliance with Information Security and IS policies while aligning with industry best practices for cloud security. The role reports to the Senior Director Information Security Engineering and collaborates with the IT Architect, Cloud Administrators, senior leadership, technical teams, legal and compliance stakeholders, external auditors, and cloud service providers. It includes architectural leadership, security control implementation, risk management, automation, compliance, and technical guidance across multi-cloud environments.

Requirements

Deep expertise in cybersecurity, cloud architecture (Azure, AWS, and GCP), and associated security services.
Experience with regulatory frameworks and standards, including SOC 2, GLBA, HIPAA, and GDPR.
Knowledge of DevSecOps practices and infrastructure-as-code tools.
Firsthand experience with Terraform, Bicep, CI/CD pipelines, and cloud security automation.
Effective communication skills for engaging technical and non-technical audiences.
Proven ability to lead complex security initiatives and drive cross-team collaboration.
Commitment to continuous learning and staying current with emerging cloud threats and technologies.
Bachelor’s degree in Computer Science, Information Systems, or a related field.
Minimum 15 years of experience in information security, with 10 or more years focused on cloud security and architecture.

Nice To Haves

Cloud architecture and security certifications, such as CCSP, GIAC GCSA, CISSP, Azure-AZ-305, Azure-SC-100, GCP-PCA, GCP-PCSE, AWS-SA-Pro, or AWS-Sec-Spec.

Responsibilities

Architect and support implementation of complex security controls across multi-cloud environments, including Azure, AWS, and GCP.
Define and implement Zero Trust principles, cloud security standards, and reference architectures.
Lead the design of secure landing zones, guardrails, and multi-cloud governance frameworks.
Partner with engineering teams to embed security into application and infrastructure designs.
Architect identity and access strategies across cloud solutions.
Design secure network architectures, including segmentation, private connectivity, and cloud-native firewalls.
Conduct threat modeling, architecture reviews, and risk assessments of cloud-based infrastructure, applications, and services.
Improve cloud security posture through automation and monitoring.
Review cloud architecture and configurations to validate security posture and data protection.
Lead threat modeling, risk assessments, and vulnerability management for cloud-native services.
Administer cloud security testing, including penetration testing, misconfiguration audits, and incident simulations.
Collaborate with DevOps and engineering teams to embed security into CI/CD pipelines and cloud deployments.
Automate cloud security controls using Terraform, Python, PowerShell, and policy-as-code frameworks.
Drive remediation of security findings and ensure alignment with regulatory and compliance frameworks.
Lead security reviews of cloud perimeter defenses, including WAFs, cloud-native firewalls, and DDoS protection.
Manage cloud security controls and endpoint protection platforms, including Defender for Cloud, CrowdStrike, Cloudflare, and Proofpoint TAP.
Provide technical guidance and mentorship to engineers and cross-functional teams.
Develop and maintain cloud security policies, playbooks, and documentation.