Technical Director of Cloud Security Architecture (Washington)

Senior Director Of Cloud Security Architecture

As the Senior Director of Cloud Security Architecture, you will oversee the design, implementation, and maintenance of robust security measures to protect our cloud infrastructure and applications. You will lead a team of cloud security architects and engineers, collaborate with cross-functional teams, and ensure that security is integrated into all aspects of the development lifecycle. Your deep technical expertise and strategic vision will help us stay ahead of emerging threats and continuously improve our security posture. You like to stay hands-on, and also oversee and lead others.

Key Responsibilities

• Develop and deploy advanced security capabilities to secure code and production infrastructure throughout the CI / CD pipeline and across non-production and production environments.
• Identify and mitigate high-risk vulnerabilities in the production environment.
• Utilize static and dynamic code analysis to assess the security of application and infrastructure code.
• Implement and operationalize the AWS Security Pillar of the AWS Well-Architected Framework and the GCP Google Cloud Architecture Framework.
• Define, build, and maintain comprehensive Cloud Security Policies, Standards, and Procedures that meet or exceed regulatory requirements.
• Evaluate, implement, and operationalize CSPM, CWPP, and CNAPP solutions across multi-cloud environments.
• Design and implement a Multi-Cloud Security Strategy, focusing on AWS and GCP.
• Introduce and manage commercial and vetted open-source solutions to secure and continuously monitor cloud infrastructure, services, and workloads.
• Support application delivery and DevOps teams in detecting and resolving security vulnerabilities.
• Leverage Terraform to automate the configuration and maintenance of cloud-native and third-party security solutions.
• Implement strong identity foundations through least privilege policies and enable traceability / observability.
• Apply security measures at all layers, from PoP to endpoint, and automate security best practices for scalability and cost-effectiveness.
• Protect data at rest and in transit with appropriate classifications and minimize direct access or manual processing of data.
• Prepare for security events and build capabilities for SOC to detect, contain, eradicate, and recover from incidents.
• Automate security acceptance testing using Python or Go.
• Harden server operating systems and containers.
• Review and analyze security event logs to support incident response efforts.
• Author and communicate blameless postmortems.
• Lead and mentor a team of cloud security architects and engineers, providing guidance and support for their professional development.
• Collaborate with cross-functional teams to ensure security is integrated into all aspects of the development lifecycle.
• Stay up-to-date with the latest security trends, threats, and technology solutions to continuously improve the organization's security posture.
• Maintain hands-on technical skills, roughly 70% of the time while overseeing management duties 30% of the time.

Required Qualifications & Skills

Preferred Qualifications