Cloud Security Architect

Air InfoSec•Austin, TX

2d•Hybrid

About The Position

The Cloud Security Architect </b>will support the Texas Health and Human Services Commission (HHSC) and will lead the design and implementation of secure -by -default architectures across cloud -native, microservices, and AI -enabled systems. The Cloud Security Architect ensures compliance with state and federal frameworks while enabling modernization and transformation initiatives. The candidate relies on experience and judgment to plan and accomplish goals, independently performs a variety of complicated tasks, and brings a wide degree of creativity and latitude to the role. This position understands business objectives and problems, identifies alternative solutions, and performs studies and cost/benefit analysis of alternatives.

Requirements

8 years of experience in information security and systems architecture.
8 years of experience designing secure cloud -native architectures, with AWS preferred.
8 years of in -depth knowledge of the Texas Cybersecurity Framework (TCF) and NIST 800 -53.
8 years of expertise in Identity and Access Management (IAM) and Zero Trust Architecture.
8 years of experience performing threat modeling for complex systems.
8 years of experience securing microservices, APIs, and containerized environments.
8 years of experience configuring cloud security posture management (CSPM) tools.
8 years of experience integrating security into DevSecOps pipelines.

Nice To Haves

4 years of experience with familiarity in securing AI/LLM -based systems and data pipelines.
4 years of experience with data protection strategies for PII, PHI, and sensitive data.
4 years of experience presenting risk assessments to executive leadership.
4 years of experience drafting enterprise security policies and architecture standards.
2 years of experience with certifications such as CISSP, CISM, or AWS Certified Security Engineer.

Responsibilities

Lead the design and implementation of secure -by -default cloud -native architectures.
Ensure compliance with the Texas Cybersecurity Framework (TCF) and NIST 800 -53.
Design and enforce Identity and Access Management (IAM) and Zero Trust Architecture strategies.
Perform threat modeling for complex enterprise systems.
Secure microservices, APIs, and containerized environments.
Configure and manage cloud security posture management (CSPM) tools.
Integrate security practices into DevSecOps pipelines.
Confer with organizational units to analyze current operational procedures, identify problems, and define input and output requirements.
Write detailed descriptions of user needs, program functions, and steps required to develop or modify computer systems.
Review system capabilities, specifications, and scheduling limitations to determine feasibility of requested changes within existing systems.