Cloud Security Architect

OpenKyber LLC

Atlanta, GA, United States

5 days ago

Apply on www.careerjet.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Working hours

Regular working hours

Job source

www.careerjet.com

Tech stack

Application Programming Interfaces (APIs) Artificial Intelligence Proxy Servers Audit Trail BigQuery Cloud Computing Cloud Computing Security Cloud Storage Databases Customer Data Management Data Governance Data Retention

+19 more

Data Security Data Stores Identity and Access Management Key Management Network Security Network Segmentation OAuth PCI Data Security Standards Security Information and Event Management Data Streaming Systems Integration Data Logging Google Cloud Chatbots Software Security HybridCloud Amazon Virtual Private Cloud (VPC) Virtual Agents Database Monitoring

Job description

Cloud/Data Security Architect Phoenix, AZ Day 1 Onsite 5 days a week. Description and Location Role: Engineer II Premium (Cloud Security Consultant) Focus: Security assessment of Google Cloud Platform-based conversational AI, telephony, API, and backend integration architecture. Responsibilities

Assess the end-to-end architecture from a data security and privacy standpoint.
Review security controls for Google Cloud Platform Shared VPC, interconnects, service accounts, IAM, and network segmentation.
Implement Sentinel policies for enforcing encryption standards and data access standards.
Implement database activity monitoring and blocking rules in Google Cloud Platform.
Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access.
Produce a findings report with risk ratings, gaps, and remediation recommendations.
Review data flows across: Google Cloud Platform service projects, Virtual agents / conversational AI, Telephony platforms, API proxies, Datastore, BigQuery, Cloud Storage, On-prem / Amex systems of record.
Identify risks related and implement controls related to: Blocking Customer data exposure, PII handling, Encryption in transit and at rest, Secrets and key management, Users and NHI authentication, Database activity Logging, monitoring, and auditability, Data retention and deletion.

Requirements

Strong experience in cloud security architecture, preferably Google Cloud Platform. Hands-on knowledge of: Google Cloud Platform IAM, VPC / Shared VPC, Cloud Run / GKE, BigQuery, Cloud Storage, Datastore / Firestore, Cloud KMS / Secret Manager. Experience assessing data protection controls for PII, PCI, or regulated customer data. Knowledge of API security, including OAuth, mTLS, token handling, gateways, and service-to-service authentication. Familiarity with network security, private connectivity, firewalls, segmentation, and hybrid cloud interconnects. Understanding of logging, SIEM integration, audit trails, and security monitoring. Experience with threat modeling and architecture risk reviews. Preferred Skills Experience with conversational AI / virtual agent platforms. Knowledge of telephony/SIP integrations and contact center platforms. Experience with PCI DSS, NIST, ISO 27001, SOC 2, or financial services security standards. Familiarity with AI data governance, model safety, and GenAI security risks For applications and inquiries, contact:hirings@openkyber.com