Principal Azure Cloud Security Architect

natgridProd•Waltham, MA

62d•$172,000 - $216,000•Hybrid

About The Position

National Grid is seeking an innovative, adaptable, and results-oriented Principal Azure Cloud Security Architect for their Cybersecurity team. This position can be located in Brooklyn, NY, Hicksville, NY, or Waltham, MA. The role involves owning the security architecture and operational security posture of Azure, designing and implementing controls, monitoring risk, driving continuous remediation, and ensuring compliance with industry regulations and best practices. The Principal Cloud Security Architect will serve as a senior technical authority for cloud security, balancing architectural leadership with hands-on execution to reduce risk across cloud environments and workloads. This role requires strong collaboration skills, deep technical knowledge of cloud providers and security technologies, proficiency with DevOps and automation, and a practical approach to risk reduction.

Requirements

Extensive hands-on experience with Azure and familiarity with other major cloud providers (AWS, GCP) and security tools and technologies (Azure Security Center, AWS Security Hub, GCP Security Command Center, CNAPP tools, etc.).
Deep understanding of cloud security concepts, including network security, data protection, identity management, and threat modeling across major cloud providers.
Strong security foundations including experience with network security, vulnerability management, penetration testing, security operations, and application security; fundamental security concepts such as encryption, secure protocols and best in class solutions.
Proficiency in scripting languages (Python, PowerShell) for automation and security orchestration.
Exceptional interpersonal and communication skills with the proven ability to build strong relationships with diverse IT and business stakeholders.
Familiarity with ICS/SCADA/OT environments and architecture, along with industry-relevant standards such as NIST, CIS benchmarks, CSA CCM, and NERC CIP.

Responsibilities

Design and implement secure Azure cloud architecture, including network segmentation, access controls, and secure account and subscription architecture
Assist with the selection, and lead the implementation of security solutions across Azure, AWS, and other major cloud providers
Develop, implement, and socialize technical patterns, standards and guidance for cloud infrastructure and applications
Own and administer the Cloud Native Application Protection Platform (CNAPP), including hands-on administration and configuration of the CNAPP solution, prioritizing findings, and driving remediation activities
Monitor cloud security posture and conduct regular security assessments and risk analysis to identify vulnerabilities and prioritize remediation efforts
Automate security policies and workflows using scripting languages and cloud native security tools to improve efficiency and scalability
Assist with incident response activities for cloud-related security incidents, including investigation, containment, remediation, and post-mortem analysis.
Collaborate with cross-functional teams (Business project teams, cloud platform and engineering teams, DevOps, Compliance) to integrate security practices into cloud deployments.