Sr Cloud Security Architect Cyber Security (Google Cloud Platform)-Austin, Dallas, San Antonio, TX

Position Overview

The role of Sr. Cloud Security Architect at H-E-B is pivotal in designing and driving the cloud security architecture for both hybrid and cloud-first models. In this role, you will provide strategic guidance as a subject matter expert, collaborate with internal Information Systems teams and external vendors, and ensure that security controls meet H-E-B's high standards.

Key Responsibilities

• Serve as a subject matter expert for cloud security, providing guidance on industry best practices and defense-in-depth strategies for H-E-B’s cloud-based digital platforms.
• Work with project teams to measure, test, and evaluate new solutions to ensure they satisfy H-E-B security requirements.
• Collaborate with internal Information Systems teams to design security controls and enhance the cloud security infrastructure to support business and engineering needs.
• Create best-of-class security architecture designs and patterns using defensible industry reference architectures and standards.
• Design and implement tests of cloud configurations and infrastructure to identify vulnerabilities and security defects.
• Ensure all cloud infrastructure designs and implementations comply with security and control requirements by addressing configuration gaps with relevant stakeholders.
• Design, develop, document, automate, and implement security infrastructure in code.
• Create and maintain detailed security architecture specifications and design documentation.
• Support the strategic direction for leveraging cloud-relevant technologies to enhance overall security.

Required Qualifications

• 7+ years of experience in designing and implementing complex solutions in medium to large enterprises.
• 5+ years of experience in building and integrating systems in public or hybrid cloud environments.
• 3+ years of experience with information security.
• Experience with Google Cloud Platform and a working knowledge of its security tools and practices.
• Working knowledge of Terraform, Cloud Formation, Azure ARM Template, Pulumi, and/or Ansible with demonstrable proficiency in at least one.
• Solid understanding of web applications, web servers, application firewalls, frameworks, and protocols in the context of cloud development and deployment.
• Proficiency with cloud resources including virtual networking, access controls, service endpoints, load balancing, API gateways, service meshes, serverless functions, storage buckets, containers, block storage, and file shares.
• Working knowledge of security controls, guidelines, and standards (e.g., ISO27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOC 2, and NIST).
• Familiarity with privacy and data protection regulations (e.g., PCI DSS, HIPAA/HITECH).
• Proficiency with one of the following: Python, Golang, JavaScript, PowerShell, Perl, or *nix Shell scripting.
• Experience with secrets management and vaulting technologies.
• Familiarity with Agile and other project methodologies.
• Ability to work well under pressure with strong organizational and interpersonal skills.
• Familiarity with CSPM/CNAPP technologies.

Preferred Qualifications

• A Bachelor’s degree in Computer Science or Software Engineering.
• One or more professional security certifications such as CISSP, CISA, CEH, GIAC; and cloud certifications from AWS, Azure, and/or GCP.
• Experience with cloud security tools for discovery, compliance, and vulnerability detection.