Cloud Security Architect

An opportunity is available for a Cloud Security Architect to join as a senior practitioner on a cloud security team. This role reports to director-level leadership and is responsible for shaping policy, leading architectural reviews, driving AI security governance, and providing direct technical guidance to product and engineering teams across all public cloud environments., * Act as a Cloud Security Subject Matter Expert (SME) for the Infosec department.

• Reduce cloud security risk, develop solutions, and lead implementations.
• Partner with product teams to design secure network and serverless architectures.
• Provide IAM Policy guidance to enable product teams to implement least privilege access.
• Review cloud architecture and AI/ML workflows to advise development teams on security design principles.
• Define and enforce security controls for AI/ML pipelines, including model access governance and data handling.
• Create design artifacts to enable members of the Cloud Security team to implement solutions.
• Engage with Azure, Google Cloud Platform, and AWS account teams and technical advisors to influence roadmaps.
• Create and maintain documentation for cloud security implementations, processes, and standards.
• Collaborate with senior management to assess near- and long-term cloud security needs.
• Participate in a tier 4 SME on-call rotation.
• Mentor junior members of the team.
• Stay current with the latest cloud and AI threat mitigation tools and techniques.

Education: A bachelor’s degree in computer science, Information Security, or equivalent practical experience is required.

Experience: This role requires 6+ years in cloud security architecture roles. Candidates should have a strong understanding of cloud-based infrastructure components and the security risks in a decentralized and hybrid environment. A broad understanding of information security, compliance risk, and a core understanding of IP Networking are necessary. The role also requires the demonstrated ability to build and own security automation end-to-end.

Technical Skills: Proficiency in at least one scripting language (Python, Node.js, Golang, bash, etc.) is needed. Hands-on experience is required with cloud native security tools (Azure Defender for Cloud, Google Cloud Platform Security Command Center, AWS GuardDuty), command line interfaces (Bash, Powershell, AWS-CLI), security administration in Azure/Google Cloud Platform/AWS, perimeter security (WAF, CDN), cloud network engineering (CIDR, routing, VPN), zero trust architecture (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault), SIEM/logging platforms (Splunk, Chronicle), Infrastructure as Code tools (Terraform, CloudFormation, Ansible), Docker, Kubernetes, developing and securing serverless applications, and GitHub Security. Familiarity with security frameworks and benchmarks (NIST CSF, CIS Benchmarks, SOC 2) is also required.

Preferred Qualifications

• Experience securing AI/ML workloads, including LLM API governance, training data access controls, and RAG pipeline security.
• Azure Certifications: Azure Fundamentals, Solutions Architect.
• Google Cloud Platform Certifications: Associate Cloud Engineer, Professional Security Engineer.
• AWS Certifications: AWS Solutions Architect, AWS Security Specialty.
• Security Engineer Certifications: CISSP, CompTIA Security+.
• Previous Experience with Wiz, Splunk, or Brinqa integrations.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at