Cloud Security Architect

SailPoint • Austin, TX

8d • Remote

About The Position

SailPoint’s Cybersecurity organization is seeking a Cloud Security Architect to design, implement, and govern secure cloud infrastructure across the organization. The role governs security architecture across AWS, Azure, and GCP environments, partners closely with Engineering, DevOps, and IT, and helps ensure cloud security meets business needs and regulatory requirements. The position reports to the Director of Cyber Product Security (CPS) and joins a team of security engineers who collaborate with stakeholders across the organization.

The successful candidate will help shape cloud security through process and technology optimization, capability development, and maturation of existing activities. The role calls for deep technical expertise and the ability to translate security requirements into practical, scalable solutions, while contributing positively to SailPoint’s collaborative work culture.

This is a US-based remote role; candidates will be required to interview in person.

Requirements

• At least 5 years of experience in cloud security, security architecture, or related infrastructure security roles.
• Hands-on experience securing workloads in AWS, Azure, and/or GCP.
• Strong understanding of IAM, network security, encryption, and key management in cloud environments.
• Experience with cloud security tooling, such as AWS Security Hub, Azure Defender, Prisma Cloud, Wiz, Orca Security, or similar CSPM/CWPP platforms.
• Demonstrable experience with container and Kubernetes security.
• Working knowledge of compliance frameworks, including SOC 2, ISO 27001, NIST 800-53, and CIS Benchmarks.
• Experience with Infrastructure as Code and integrating security into CI/CD pipelines.
• Strong hands-on experience with at least one major cloud provider; ability to design defense-in-depth architectures that balance security, cost, and performance.
• Comfort with Infrastructure as Code tools such as Terraform, CloudFormation, or ARM/Bicep and scripting languages such as Python, Bash, or PowerShell.
• Ability to explain complex security concepts to technical and non-technical stakeholders.
• Track record of cross-functional collaboration with engineering and IT teams.
• Strong risk assessment and threat modeling capabilities, including attack path analysis and exposure validation.
• Ability to influence without direct authority and drive security best practices across teams.
• Comfort operating in fast-changing environments with evolving cloud services and threat landscapes.

Nice To Haves

• Relevant certifications preferred: CCSP, AWS Certified Security - Specialty, Azure Security Engineer, or Google Professional Cloud Security Engineer.
• Working knowledge of multi-cloud concepts.

Responsibilities

• Design and implement secure cloud architecture patterns across IaaS, PaaS, and SaaS environments.
• Define and enforce cloud security standards, reference architectures, and guardrails, including landing zones, network segmentation, and identity boundaries.
• Lead security reviews of new cloud initiatives and provide architecture guidance from design through deployment.
• Architect and oversee IAM strategies, including least-privilege access, federation, and role-based access control.
• Partner with Cyber teams, including VM, to evaluate and implement cloud-native and third-party security tools such as CSPM, CWPP, CIEM, and SIEM/SOAR integrations.
• Partner with DevOps and Platform teams to embed security into CI/CD pipelines, including DevSecOps and Infrastructure as Code security scanning.
• Conduct threat modeling and risk assessments for cloud workloads and services.
• Ensure compliance with relevant frameworks, including SOC 2, ISO 27001, NIST, and CIS Benchmarks as applicable.
• Develop and maintain documentation, runbooks, and architecture diagrams for cloud security controls.
• Mentor engineering teams on secure cloud design principles and serve as a security subject-matter expert.
• Stay current on emerging cloud threats, vulnerabilities, and vendor security capabilities.
• Assess the current cloud security posture, identify gaps and high-risk areas, and deliver prioritized recommendations.
• Design and publish cloud security reference architectures and standards, optimize security review processes, and help integrate security checks into CI/CD pipelines.
• Deliver security architecture training or enablement sessions to engineering teams.
• Contribute to or lead the organization’s cloud security roadmap and demonstrate measurable risk reduction.

Benefits

• Competitive compensation.
• Flexible Time Off and paid company holidays.
• Medical, dental, and vision insurance.
• Short-term and long-term disability coverage.
• Life insurance and Accidental Death & Dismemberment (AD&D) coverage.
• Supplemental life insurance options for employees, spouses, and children.
• Flexible spending accounts for health care and dependent care, including a limited-purpose flexible spending account.
• 401(k) Savings and Investment Plan with company matching.
• Eight paid holidays annually.
• Sick leave.
• Paid parental leave.
• Employee Assistance Program (EAP) and Care Counselors.
• Voluntary legal assistance, critical illness, accident, hospital indemnity, and pet insurance options.
• Health Savings Account (HSA) with employer contribution.
• Career growth opportunities.
• May be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, and potential equity participation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed