Cloud Security Design and Controls Lead

Bank of America
Denver, CO, United States
4 days ago
Apply on us.experteer.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
5 years minimum
Working hours
Regular working hours

Tech stack

Amazon Web Services Microsoft Azure Cloud Computing Security Information Systems DevOps Google Tools Identity and Access Management Intrusion Detection Systems Open Web Application Security Public Key Infrastructure Security Information and Event Management Policy as Code
+9 more
Google Cloud Cloud Platform System Multi-Cloud Firewalls (Computer Science) Azure Security Center Kubernetes Information Technology Terraform Docker

Job description

Experteer Overview In this role you will lead secure cloud architecture and controls across multi-cloud environments, focusing on Azure, AWS, and Google platforms. You will partner with security, DevOps, and business teams to embed security into pipelines and operations. You’ll drive risk assessments, audits, and governance to protect data and systems while promoting a security-first culture. This is an opportunity to shape cloud security strategy at scale within a collaborative, in-office environment that values growth and innovation. Compensation / Benefits * Design and implement secure cloud architectures aligned with business and security requirements * Embed security into CI/CD pipelines and development workflows * Develop customized security solutions and policy as code using PaC tools (Sentinel, OPA, Terraform) * Collaborate with security and DevOps teams to align policies with operations * Conduct risk assessments and regular security audits of cloud environments * Create evidence packages for audits and demonstrate compliance to stakeholders * Maintain documentation of security controls, policies, and procedures * Lead governance activities and ensure compliance with ISO 27001, NIST, GDPR, HIPAA Tasks * 5+ years in designing/implementing cloud security controls * Bachelor’s in Information Systems or Computer Science or equivalent * Deep understanding of Azure/AWS security and at-scale frameworks (OWASP Top 10, NIST, CSA, CIS) * Experience with Infrastructure as Code and Policy as Code governance * Security assessments, risk analyses, and security concept development * Hands-on experience with cloud security tools (AWS Security Hub, Azure Security Center, Google Cloud Security Command Center, Wiz) * Knowledge of SIEM, IDS/IPS, DLP, firewalls, PKI, identity management in cloud contexts; AWS networking primitives, SGs, NACLs, proxies, WAF * Experience with Kubernetes/Docker and containerized platforms (AKS, EKS, ECS) * Active AWS Security Specialty or Azure AZ-500 certification Key requirements * affordable, competitive and flexible benefits

Requirements

27001, packages for audits and demonstrate compliance to stakeholders * Maintain documentation of security controls, policies, and procedures * Lead governance activities and ensure compliance with ISO 27001, NIST, GDPR, HIPAA Tasks * 5+ years in designing/implementing cloud security controls * Bachelor’s in Information Systems or Computer Science or equivalent * Deep understanding of Azure/AWS security and at-scale frameworks (OWASP Top 10, NIST, CSA, CIS) * Experience with Infrastructure as Code and Policy as Code governance * Security assessments, risk analyses, and security concept development * Hands-on experience with cloud security tools (AWS Security Hub, Azure Security Center, Google Cloud Security Command Center, Wiz) * Knowledge of SIEM, IDS/IPS, DLP, firewalls, PKI, identity management in cloud contexts; AWS networking primitives, SGs, NACLs, proxies, WAF * Experience with Kubernetes/Docker and containerized platforms (AKS, EKS, ECS) * Active AWS Security Specialty or Azure aa CIS) certification Key requirements * affordable, competitive and flexible benefits

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

10:35 min

Teaching and coaching security concepts for lasting impact

Tanya Janca · World Congress 2021

2:07 min

Inspecting default bridge architectures and custom Docker networks

Oliver Seitz Oliver Seitz · World Congress 2025

2:17 min

Mapping the maturity roadmap for scaled devops adoption

Dominik Krichbaum Dominik Krichbaum · World Congress 2026 Europe

1:34 min

Essential commands for running and testing Terraform configurations

Hennie Francis · LIVE

6:13 min

Defining cloud proficiency by technical role

Piet Van Dongen · LIVE

2:34 min

Docker sandbox architecture and microVM environment integration

Manuel de la Peña Manuel de la Peña · World Congress 2026 Europe

Videos

See all

Related articles

See all