> Markdown version of [/jobs/ext/1657976-cloud-security-solution-architect](https://www.wearedevelopers.com/jobs/ext/1657976-cloud-security-solution-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Solution Architect

- **Company:** Bank of America
- **Location:** Chicago, IL, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Agile Methodology, Artificial Intelligence, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Control Objectives for Information and Related Technology (COBIT), Cyber Security, Software Design Patterns, DevOps, Infrastructure as a Service (IaaS), Identity and Access Management, Information Security Management, Information Systems Security Architecture Professional, Metadata, Open Web Application Security, Platform as a Service (PAAS), Cloud Services, Software Engineering, Software Requirements Analysis, Software Security, HybridCloud, Data Strategy, Kubernetes, Infrastructure Automation Frameworks, Data Analytics, Data Management, Serverless Computing
- **Published:** July 2, 2026
- **Apply:** https://dejobs.org/x/x/C97DFFB7CDDD4C5A9FF95F1327FB0948/job/

## About the Role

* Knowledge and understanding of Cloud Security specific laws, rules, regulations, and Guidelines, such as NIST, ISO, CIS, CSA, SOC 2, PCI, COBIT, ISO, OWASP, etc., relevant to the financial services sector.
 * Possession of CISSP certification would be an advantage.
 * Demonstrates broad knowledge and inherent risks of modern IT hosting, such as public cloud services from all major Cloud Providers, SaaS applications, Kubernetes, serverless, and Infrastructure as Code.
 * Knowledge of, and how to secure the use of, AI solutions from major Cloud Providers
 * Experience with Cloud Provider native and industry leading third party security tools that deliver various aspects of a Cloud Native Application Protection Platform, like CSPM and CIEM
 * Knowledge of software development lifecycle related tools and methodologies which support automated orchestration and security compliance integration within different pipeline solutions would be an advantage.
 * 5+ years relevant hands-on experience in application security fields in a large and complex organization.
 * Security knowledge covering core technology infrastructure, cloud technologies, AI, and application security practices.
 * Proficient in articulating facts and data-driven plans, and ability to partner with stakeholders to implement intended solutions to drive risk reductions and adherence to relevant cloud security frameworks.
 * Strong attention to detail and advanced analytical skills.
 * Excellent communication and presentation skills.
 * Excellent organizational skills and be able to effectively prioritize multiple tasks.
 * Hands on experience and involvement in large and complex projects.
 * Proficient in data management which includes strong data analytical capabilities with advanced understanding of the collection and management of metadata., * Analytical Thinking
 * Architecture
 * Result Orientation
 * Solution Design
 * Technical Strategy Development
 * Application Development
 * Collaboration
 * Data Management
 * DevOps Practices
 * Risk Management
 * Agile Practices
 * Automation
 * Influence
 * Solution Delivery Process
 * Test Engineering

## Description

We are seeking an experienced Cloud Security Solution Architect to join an exciting team within Global Information Security (GIS). Cyber Security Technology (CST) is a globally distributed team responsible for cyber security innovation, architecture, engineering, solutions and capabilities development, cyber resiliency, access management, data strategy, deployment maintenance, technical project management, and information technology security control support.

The Cloud Security Solution Architect is responsible for designing, strengthening, and securing the Bank's use of external and hybrid cloud platforms and services, ensuring a robust and resilient cloud security posture. This role partners closely with Lines of Business and CIO teams to drive continuous improvement in security adherence and standards. The Solution Architect will design, identify, and document inefficiencies with possible improvement opportunities across Cloud related projects.

Additionally, the role also will actively apply knowledge of laws, rules, regulations, and information security concepts (e.g., NIST, ISO, CIS, CSA, SOC 2, PCI, COBIT, ISO, OWASP) to establish and maintain information security policies and standards. Job expectations include working with information security engineering and product teams to identify risk gaps and direct the overall Cloud security strategy.

Responsibilities

 * Design and deliver secure cloud solutions across IaaS, PaaS, and SaaS, leveraging existing security patterns aligned to business needs.
 * Define secure architectures for hybrid environments, ensuring integration between external cloud platforms and internal systems.
 * Lead end-to-end solution design, including requirements definition, risk identification, and alignment with application security policies.
 * Collaborate with cloud development partners and cross-functional security teams to establish and promote best practices in platform engineering, operations, governance, and design patterns.
 * Maintain thought leadership by staying current on emerging technologies, industry trends, and associated risks.
 * Own and maintain product design documentation, reference architectures, and portfolio-level blueprints for application security platforms.
 * Provide expert guidance on security design, standards, and operational practices.
 * Drive architecture governance discussions by developing artifacts and influencing key decisions.
 * Communicate risks, challenges, and solutions effectively to engineering, operations, risk partners, and senior leadership., This job is responsible for defining an architectural vision and solution that supports the strategic outcomes of the Business' Products and Services. Key responsibilities include defining the target operating environment, designing for client resiliency, assisting with solution design, and defining non-functional requirements. Job expectations include working with stakeholders and service providers aligned to the Business' strategic objectives, evaluating the impact of strategic design decisions, and contributing to the architecture roadmap., * Works across the business, operations and technology to create the solution intent and architectural vision for complex solutions and prioritize functional and non-functional requirements into a technology backlog to enable the technology roadmap and functionality to support evolving capabilities and services
 * Contributes to the creation of the architecture roadmap of defined domains (Business, Application, Data, and Technology) in support of the product roadmap and the development of best practices including standardized templates
 * Clarifies the architecture, assists with system design to support implementation, and provides solution options to resolve any architectural impediments
 * Facilitates solution driven discussions, leads the design of complex architectures, and finds creative solutions through knowledge of domain, practical experiments, and proof of concepts while ensuring architecture is flexible, modular, and adaptable
 * Educates team members on the technology practices, standardization strategies, and best practices to create innovative solutions
 * Supports the team as needed to select the technology stack required for solutions and helps select preferred technology products
 * Performs design and code reviews to ensure all non-functional requirements are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability), Bank of America and its affiliates consider for employment and hire qualified candidates without regard to race, religious creed, religion, color, sex, sexual orientation, genetic information, gender, gender identity, gender expression, age, national origin, ancestry, citizenship, protected veteran or disability status or any factor prohibited by law, and as such affirms in policy and practice to support and promote the concept of equal employment opportunity, in accordance with all applicable federal, state, provincial and municipal laws. The company also prohibits discrimination on other bases such as medical condition, marital status or any other factor that is irrelevant to the performance of our teammates.

View your "Know your Rights (https://www.eeoc.gov/sites/default/files/2023-06/22-088_EEOC_KnowYourRights6.12.pdf) " poster.

View the LA County Fair Chance Ordinance (https://dcba.lacounty.gov/wp-content/uploads/2024/08/FCOE-Official-Notice-Eng-Final-8.30.2024.pdf) .


## Related Videos

- [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [A Data Mesh needs Open Metadata](https://www.wearedevelopers.com/videos/505-a-data-mesh-needs-open-metadata)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)