Cloud Security Architect

SailPoint

1d•$174,200 - $293,702•Remote

About The Position

SailPoint’s Cybersecurity organization is seeking a Cloud Security Architect to design, implement, and govern secure cloud infrastructure across the organization. The role reports to the Director of Cyber Product Security (CPS) and works with security engineers and stakeholders across the organization. The architect will govern security architecture for AWS, Azure, and GCP environments, partner closely with Engineering, DevOps, and IT, and ensure cloud security posture meets business needs and regulatory requirements. The role calls for deep technical expertise and the ability to turn security requirements into practical, scalable solutions. The successful candidate will help shape future capabilities through process and technology optimization, capability acquisition and development, and maturation of existing activities. The position is US-based and remote, with an in-person interview requirement. SailPoint describes its work culture as flexible and remote-first, collaborative, inclusive, and built around autonomy, trust, work-life balance, and meaningful impact. The first 90 days focus on onboarding, assessing current cloud security posture, building stakeholder relationships, reporting prioritized findings, beginning critical remediation, and learning existing architecture, IAM structures, and network topology. Within six months, the role is expected to publish core security reference architectures and standards, improve security reviews, reduce high-risk findings, integrate checks into CI/CD, train engineering teams, and improve posture metrics. Within 12 months, the role is expected to advance compliance posture, establish repeatable reviews and mature DevSecOps integration, serve as a cloud architecture expert, contribute to the security roadmap, demonstrate risk reduction, and mentor or help develop team capability.

Requirements

At least 5 years of experience in cloud security, security architecture, or related infrastructure security roles.
Demonstrated hands-on experience securing workloads in AWS, Azure, and/or GCP.
Strong understanding of IAM, network security, encryption, and key management in cloud environments.
Experience with cloud security tooling such as AWS Security Hub, Azure Defender, Prisma Cloud, Wiz, Orca Security, or similar CSPM/CWPP platforms.
Demonstrable experience with container and Kubernetes security.
Working knowledge of compliance frameworks including SOC 2, ISO 27001, NIST 800-53, and CIS Benchmarks.
Experience with Infrastructure as Code and integrating security into CI/CD pipelines.
Strong hands-on experience with at least one major cloud provider and working knowledge of multi-cloud concepts.
Ability to design defense-in-depth architectures that balance security, cost, and performance.
Comfort with Infrastructure as Code tools such as Terraform, CloudFormation, and ARM/Bicep, and scripting languages such as Python, Bash, or PowerShell.
Ability to explain complex security concepts to technical and non-technical stakeholders.
Track record of cross-functional work with engineering and IT teams.
Strong risk assessment and threat modeling capabilities.
Ability to prioritize risk by analyzing attack paths and validating exposure across misconfigurations, vulnerabilities, and identity permissions.
Ability to influence without direct authority and drive security best practices across teams.
Comfort operating in fast-changing environments with evolving cloud services and threat landscapes.

Nice To Haves

Relevant certifications such as CCSP, AWS Certified Security - Specialty, Azure Security Engineer, or Google Professional Cloud Security Engineer.
Working knowledge of multi-cloud concepts.
Experience with attack path analysis and exposure validation.

Responsibilities

Design and implement secure cloud architecture patterns across IaaS, PaaS, and SaaS environments.
Define and enforce cloud security standards, reference architectures, and guardrails, including landing zones, network segmentation, and identity boundaries.
Lead security reviews of new cloud initiatives and provide architecture guidance from design through deployment.
Architect and oversee IAM strategies, including least-privilege access, federation, and role-based access control.
Partner with Cyber teams to evaluate and implement cloud-native and third-party security tools, including CSPM, CWPP, and CIEM tools and SIEM/SOAR integrations.
Partner with DevOps and Platform teams to embed security into CI/CD pipelines, including DevSecOps and Infrastructure as Code security scanning.
Conduct threat modeling and risk assessments for cloud workloads and services.
Ensure compliance with applicable frameworks, including SOC 2, ISO 27001, NIST, and CIS Benchmarks.
Develop and maintain documentation, runbooks, and architecture diagrams for cloud security controls.
Mentor engineering teams on secure cloud design principles and serve as a security subject-matter expert.
Stay current on emerging cloud threats, vulnerabilities, and vendor security capabilities.
Assess current cloud security posture, identify gaps and high-risk areas, and deliver prioritized recommendations.
Design and publish cloud security reference architectures and standards, including landing zones, network segmentation, and IAM baselines.
Optimize cloud security review processes and integrate security checks and automated gates into CI/CD pipelines.
Provide security architecture training and enablement to engineering teams.
Contribute to or lead the organization's cloud security roadmap and demonstrate measurable risk reduction.

Benefits

Competitive compensation.
Flexible time off and paid company holidays.
Medical, dental, and vision insurance.
Short-term and long-term disability coverage.
Life insurance and Accidental Death & Dismemberment coverage.
Supplemental life insurance options for employees, spouses, and children.
Health care, dependent care, and limited-purpose flexible spending accounts.
401(k) Savings and Investment Plan with company matching.
Flexible vacation policy.
Eight paid holidays annually.
Sick leave.
Paid parental leave.
Employee Assistance Program and care counselors.
Voluntary legal assistance, critical illness, accident, hospital indemnity, and pet insurance options.
Health Savings Account with employer contribution.
Career growth opportunities.
Potential eligibility for the SailPoint Corporate Bonus Plan or role-specific commission, and potential equity participation.