> Markdown version of [/jobs/ext/2024692-cloud-security-design-and-controls-lead](https://www.wearedevelopers.com/jobs/ext/2024692-cloud-security-design-and-controls-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cloud Security Design and Controls Lead

- **Company:** Bank of America
- **Location:** Denver, CO, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Information Systems, DevOps, Google Tools, Identity and Access Management, Intrusion Detection Systems, Open Web Application Security, Public Key Infrastructure, Security Information and Event Management, Policy as Code, Google Cloud, Cloud Platform System, Multi-Cloud, Firewalls (Computer Science), Azure Security Center, Kubernetes, Information Technology, Terraform, Docker
- **Published:** August 11, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/cloud-security-design-and-controls-lead-denver-co-usa-58896516

## About the Role

27001, packages for audits and demonstrate compliance to stakeholders * Maintain documentation of security controls, policies, and procedures * Lead governance activities and ensure compliance with ISO 27001, NIST, GDPR, HIPAA Tasks * 5+ years in designing/implementing cloud security controls * Bachelor's in Information Systems or Computer Science or equivalent * Deep understanding of Azure/AWS security and at-scale frameworks (OWASP Top 10, NIST, CSA, CIS) * Experience with Infrastructure as Code and Policy as Code governance * Security assessments, risk analyses, and security concept development * Hands-on experience with cloud security tools (AWS Security Hub, Azure Security Center, Google Cloud Security Command Center, Wiz) * Knowledge of SIEM, IDS/IPS, DLP, firewalls, PKI, identity management in cloud contexts; AWS networking primitives, SGs, NACLs, proxies, WAF * Experience with Kubernetes/Docker and containerized platforms (AKS, EKS, ECS) * Active AWS Security Specialty or Azure aa
CIS) certification Key requirements * affordable, competitive and flexible benefits

## Description

Experteer Overview In this role you will lead secure cloud architecture and controls across multi-cloud environments, focusing on Azure, AWS, and Google platforms. You will partner with security, DevOps, and business teams to embed security into pipelines and operations. You'll drive risk assessments, audits, and governance to protect data and systems while promoting a security-first culture. This is an opportunity to shape cloud security strategy at scale within a collaborative, in-office environment that values growth and innovation. Compensation / Benefits * Design and implement secure cloud architectures aligned with business and security requirements * Embed security into CI/CD pipelines and development workflows * Develop customized security solutions and policy as code using PaC tools (Sentinel, OPA, Terraform) * Collaborate with security and DevOps teams to align policies with operations * Conduct risk assessments and regular security audits of cloud environments * Create evidence packages for audits and demonstrate compliance to stakeholders * Maintain documentation of security controls, policies, and procedures * Lead governance activities and ensure compliance with ISO 27001, NIST, GDPR, HIPAA Tasks * 5+ years in designing/implementing cloud security controls * Bachelor's in Information Systems or Computer Science or equivalent * Deep understanding of Azure/AWS security and at-scale frameworks (OWASP Top 10, NIST, CSA, CIS) * Experience with Infrastructure as Code and Policy as Code governance * Security assessments, risk analyses, and security concept development * Hands-on experience with cloud security tools (AWS Security Hub, Azure Security Center, Google Cloud Security Command Center, Wiz) * Knowledge of SIEM, IDS/IPS, DLP, firewalls, PKI, identity management in cloud contexts; AWS networking primitives, SGs, NACLs, proxies, WAF * Experience with Kubernetes/Docker and containerized platforms (AKS, EKS, ECS) * Active AWS Security Specialty or Azure AZ-500 certification Key requirements * affordable, competitive and flexible benefits


## Related Videos

- [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment)
- [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)