Cloud Security Architect

Key Responsibilities
Design and govern secure cloud architectures across multi-cloud platforms.
Lead Wiz CSPM implementation, configuration, and optimization.
Monitor and remediate:
Cloud misconfigurations
Excessive IAM permissions
Public exposure risks
Attack path vulnerabilities
Define security guardrails, policies, and cloud governance controls.
Establish detection, classification, and remediation SLAs.
Integrate Wiz with ITSM, CI/CD, SIEM, and CloudOps platforms.
Enable automated remediation using IaC and serverless functions.
Support cloud compliance frameworks (CIS, NIST, ISO 27001, SOC 2).
Produce executive dashboards and security posture reports.
Act as security advisor for cloud migration and modernization programs.

Required Skills & Experience
15+ years of IT infrastructure/security experience.
8+ years in Cloud Security Architecture.
Strong hands-on experience with Wiz CSPM (mandatory).
Experience across:
AWS, Azure, and/or GCP
IAM, networking, encryption, logging, monitoring
Solid understanding of:
CSPM, CIEM, CWPP, CNAPP
Shared responsibility model
Hands-on with Terraform / IaC and basic scripting (Python, PowerShell, Bash).
Experience integrating security tools with ITSM (ServiceNow/Jira).

Preferred Qualifications
AWS Security Specialty / Azure Security (AZ-500)
CISSP / CCSP
Knowledge of Kubernetes & container security
Experience with compliance audits and regulatory environments

Key Outcomes
Improved cloud security posture and compliance score.
Reduction in critical/high-risk security findings.
Faster MTTR through automated remediation.
Audit-ready cloud environments.