Cloud Security Architect

Travel + Leisure Co.•Florida, USA (work from home), FL

3d•Hybrid

About The Position

The Cloud Security Architect will provide strategic leadership on cloud security through the design and delivery of scalable, cloud-native security architectures and the development of standards and reference architectures that accelerate secure cloud adoption. The candidate will translate business objectives and risk management strategies into cloud security capabilities, ensuring the organization can move to and operate in the cloud with confidence.

Requirements

Bachelor's degree in information technology, Computer Science, or equivalent experience
CCSP, CISSP, AWS Security Specialty, or equivalent cloud security certification
Demonstrated experience designing and securing cloud environments at enterprise scale across one or more major cloud providers (AWS, Azure, GCP)
Strong understanding of cloud-native security services — identity and access management, data protection, network security, workload protection, and logging/monitoring
Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), and CNAPP platforms
Familiarity with infrastructure-as-code security (Terraform, CloudFormation) and DevSecOps pipeline integration
Deep knowledge of cloud identity architectures including IAM, federated identity, Privileged Access Management, and Zero Trust principles
Experience with container and Kubernetes security in cloud-native deployments
Working knowledge of compliance frameworks applicable to cloud environments — PCI-DSS, HIPAA, NIST CSF, CIS Cloud Benchmarks
Knowledge of data privacy and protection regulations and how they apply to cloud data residency and handling
Excellent written, verbal, and presentation skills — able to communicate cloud risk clearly to technical and executive audiences
Strong ability to manage and prioritize multiple concurrent initiatives in a fast-paced environment
5+ years of information security experience
Experience equivalent to the education requirement may be accepted in lieu of the education requirement.

Nice To Haves

Knowledge of the vacation or hospitality industry a plus

Responsibilities

Design and maintain a cloud security architecture framework that enables secure adoption of public, private, and hybrid cloud environments aligned to business, technology, and threat drivers.
Develop and maintain cloud security reference architectures, patterns, and guardrails leveraged across the enterprise — covering IaaS, PaaS, SaaS, and serverless environments.
Define and govern cloud security standards, policies, and procedures in alignment with audit, compliance, and platform engineering teams.
Partner with Application Architects, Platform Engineers, and DevOps teams to embed security by design into cloud-native architectures and CI/CD pipelines.
Build and maintain cloud security strategic roadmaps, including adoption of CSPM, CNAPP, Zero Trust, and cloud identity capabilities.
Evaluate cloud platform and infrastructure projects for alignment with security, compliance, and cloud-native best practices.
Lead cloud architecture and design reviews, providing actionable security guidance across AWS, Azure, and/or GCP environments.
Drive cloud security technology evaluations and proof-of-concept efforts, with a focus on capabilities that scale across a multi-cloud environment.
Partner with vendor management to assess the cloud security posture of existing and prospective vendors and SaaS providers.
Lead cloud security assessments for mergers and acquisitions, with emphasis on cloud environment hygiene, identity posture, and data risk.