Cloud Security Architect

Gibson Dunn•Los Angeles, NY

About The Position

Gibson Dunn is hiring a Cloud Security Architect to lead the design, implementation, and governance of cloud security architecture across the firm’s hybrid infrastructure. The role is part of the InfoSec team and ensures cloud security compliance with Information Security and IS policies while aligning with industry best practices. It reports to the Senior Director Information Security Engineering and collaborates with the IT Architect, Cloud Administrators, senior leadership, technical teams, legal and compliance stakeholders, external auditors, and cloud service providers. The architect will oversee security across multi-cloud environments, including Azure, AWS, and GCP. The role includes establishing Zero Trust principles, secure landing zones, guardrails, reference architectures, and governance frameworks; integrating security into applications, infrastructure, CI/CD pipelines, and cloud deployments; and improving security posture through automation and monitoring. The position also leads cloud security reviews, threat modeling, risk assessments, vulnerability management, security testing, and remediation, while maintaining cloud security controls, policies, playbooks, and documentation. The annual compensation range is $190,000–$230,000, with the offered salary depending on qualifications and operational considerations. Benefits include health care, retirement benefits, paid days off including sick and vacation time, parental leave, basic life insurance, Flexible Spending Accounts, and discretionary performance-based bonuses. The firm provides reasonable accommodations to qualified applicants with disabilities during the application and recruitment process.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related field.
Minimum 15 years of experience in information security, including 10 or more years focused on cloud security and architecture.
Deep expertise in cybersecurity, cloud architecture, and associated security services across Azure, AWS, and GCP.
Experience with regulatory frameworks and standards, including SOC 2, GLBA, HIPAA, and GDPR.
Knowledge of DevSecOps practices and infrastructure-as-code tools.
Firsthand experience with Terraform, Bicep, CI/CD pipelines, and cloud security automation.
Effective communication skills for engaging technical and non-technical audiences.
Proven ability to lead complex security initiatives and drive cross-team collaboration.
Commitment to continuous learning and staying current with emerging cloud threats and technologies.

Nice To Haves

Cloud security or architecture certifications, such as CCSP, GIAC GCSA, CISSP, Azure AZ-305, Azure SC-100, GCP PCA, GCP PCSE, AWS Solutions Architect Professional, or AWS Security Specialty.

Responsibilities

Architect and support implementation of security controls across multi-cloud environments, including Azure, AWS, and GCP.
Define and implement Zero Trust principles, cloud security standards, and reference architectures.
Lead the design of secure landing zones, guardrails, and multi-cloud governance frameworks.
Partner with engineering teams to embed security into application and infrastructure designs.
Architect identity and access strategies across cloud solutions.
Design secure network architectures, including segmentation, private connectivity, and cloud-native firewalls.
Conduct threat modeling, architecture reviews, and risk assessments of cloud infrastructure, applications, and services.
Improve cloud security posture through automation and monitoring.
Review cloud architecture and configurations to validate security posture and data protection.
Lead threat modeling, risk assessments, and vulnerability management for cloud-native services.
Administer cloud security testing, including penetration testing, misconfiguration audits, and incident simulations.
Collaborate with DevOps and engineering teams to integrate security into CI/CD pipelines and cloud deployments.
Automate cloud security controls using Terraform, Python, PowerShell, and policy-as-code frameworks.
Drive remediation of security findings and alignment with regulatory and compliance frameworks.
Lead security reviews of cloud perimeter defenses, including WAFs, cloud-native firewalls, and DDoS protection.
Manage cloud security controls and endpoint protection platforms, including Defender for Cloud, CrowdStrike, Cloudflare, and Proofpoint TAP.
Provide technical guidance and mentorship to engineers and cross-functional teams.
Develop and maintain cloud security policies, playbooks, and documentation.