Cloud Security Architect

Position Overview

This role is a subject matter expert in cloud security tasked with guiding the design and implementation of secure cloud solutions. The candidate will work closely with project teams and internal Information Systems to ensure that all solutions meet H-E-B security requirements and adhere to industry best practices.

Key Responsibilities

• Serve as a subject matter expert for cloud security, providing guidance on industry best practices and defense in-depth strategies.
• Work with project teams to measure the testing and evaluation of new solutions ensuring satisfaction of H-E-B security requirements.
• Collaborate with internal Information Systems teams to design security controls and improve cloud security infrastructure.
• Create best-of-class security architecture designs and patterns using defensible industry reference architectures and standards.
• Measure and design tests of cloud configurations and infrastructure for vulnerabilities and security-relevant defects.
• Ensure all cloud infrastructure designs and implementations follow security and compliance control requirements.
• Resolve configuration gaps or defects through collaboration with respective stakeholders.
• Design, develop, document, automate, and implement security infrastructure in code.
• Create and maintain security architecture specifications and design documentation.
• Support setting the strategic security direction and approach for utilizing cloud-relevant technologies.

Required Qualifications

• Minimum of seven (7) years of experience with the design and implementation of complex solutions in medium to large enterprises.
• Minimum of five (5) years of experience building and integrating systems in public or hybrid cloud environments.
• Minimum of three (3) years of experience with information security.
• Working knowledge of Amazon Web Services, Azure and/or Google Cloud Platform.
• Working knowledge of Terraform, Cloud Formation, Azure ARM Template, Pulumi, and/or Ansible with demonstrable proficiency with at least one.
• Solid understanding of web applications, web servers, application firewalls, frameworks, and protocols.
• Proficiency with cloud resources such as virtual networking, access controls, service endpoints, application and network load balancing, API gateways, service principals, functions/serverless, storage buckets, containers, block storage and file shares.
• Working knowledge of information security controls, guidelines and standards (e.g., ISO27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOC 2, and NIST).
• Experience and basic understanding of privacy and data protection regulations (e.g., PCI DSS and HIPAA/HITECH).
• Proficiency with Python, Golang, JavaScript, PowerShell, Perl, or *nix Shell scripting.
• Proficiency with secrets management and vaulting technologies.
• Familiarity with Agile and other project methodologies.
• Ability to work well under pressure and demonstrate strong organizational and interpersonal skills.

Preferred Qualifications

• A Bachelor's degree in Computer Science or Software Engineering.
• One or more professional security certifications such as CISSP, CISA, CEH, GIAC; and cloud certifications from AWS, Azure and/or GCP.
• Experience with cloud security tools for discovery, compliance, and vulnerability detection.