Sr. Cloud Security Architect-San Antonio, Dallas, Austin, TX

Position Overview

As a Cloud Security Architect at H‑E‑B, you will drive the architecture and design patterns for our cloud and hybrid security solutions. You will analyze existing cloud security configurations, design and implement improvements, and work closely with internal teams and external vendors to ensure that all solutions align with H‑E‑B’s cloud security strategy. With a HEART FOR PEOPLE, a HEAD FOR BUSINESS, and a PASSION FOR RESULTS, you will mentor your team, remove roadblocks, and guide strategic discussions to deliver high‑quality, secure systems.

Key Responsibilities

• Serve as a subject matter expert for cloud security, providing guidance on industry best practices and defense‑in‑depth strategies for H‑E‑B’s cloud‑based digital platforms.
• Collaborate with project teams to test and evaluate new solutions ensuring they meet H‑E‑B security requirements.
• Work with internal Information Systems teams to design security controls and enhance cloud security infrastructure to support business and engineering needs.
• Create best‑of‑class security architecture designs and patterns using defensible industry reference architectures and standards.
• Measure and design tests of cloud configurations and infrastructure to identify vulnerabilities and security defects.
• Ensure that all cloud infrastructure designs and implementations follow security and compliance control requirements and resolve any configuration gaps through collaboration with stakeholders.
• Design, develop, document, automate, and implement security infrastructure in code, including maintaining architecture specifications and design documentation.
• Support setting the strategic security direction and approach for leveraging cloud‑relevant technologies.

Required Qualifications

• 7+ years of experience with the design and implementation of complex solutions in medium to large enterprises.
• 5+ years of experience building and integrating systems in public or hybrid cloud environments.
• 3+ years of experience with information security.
• Working knowledge of Amazon Web Services, Azure and/or Google Cloud Platform, along with security tools and practices offered by these platforms.
• Experience with Terraform, CloudFormation, Azure ARM Template, Pulumi, and/or Ansible with demonstrable proficiency in at least one.
• Solid understanding of web applications, servers, application firewalls, frameworks, and protocols related to web application development, deployment, and cloud operation.
• Proficiency with cloud resources such as virtual networking, access controls (security groups and ACLs), service endpoints, load balancing, API gateways, service meshes, serverless functions, storage buckets, containers, and file shares.
• Familiarity with information security controls, guidelines, and standards (e.g., ISO27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOC 2, and NIST).
• Understanding of privacy and data protection regulations (e.g., PCI DSS and HIPAA/HITECH).
• Proficiency in one or more programming/scripting languages such as Python, Golang, JavaScript, PowerShell, Perl, or *nix Shell scripting.
• Experience with secrets management and vaulting technologies.
• Familiarity with Agile and other project methodologies.
• Ability to work well under pressure with strong organizational and interpersonal skills.
• Familiarity with CSPM/CNAPP.

Preferred Qualifications

• A Bachelor’s degree in Computer Science or Software Engineering.
• One or more professional security certifications such as CISSP, CISA, CEH, GIAC along with cloud certifications from AWS, Azure and/or GCP.
• Experience with cloud security tools for discovery, compliance, and vulnerability detection.