Cloud Security Architect

Visa: Visa: TN, L2, E2, (No H1B & OPT)

Job Summary: Seeking a hands-on Cloud Security Engineer with strong Wiz CNAPP experience to lead a 3-week CNAPP PoC for a healthcare/medical device client. The role involves AWS/Azure onboarding, CSPM, CIEM, DSPM, CDR, integrations, remediation, and executive reporting.

• Configure and onboard AWS and Azure environments into Wiz agentlessly.
• Establish CSPM, CIEM, DSPM, CDR/Wiz Defend baselines and identify cloud risks/attack paths.
• Analyze IAM permissions, toxic access, privilege escalation, and least-privilege requirements.
• Scan and classify PII/PHI across AWS S3, Azure Blob, and RDS.
• Integrate Wiz with Microsoft Sentinel, ServiceNow, Entra ID, and vulnerability-management tools.
• Implement IaC security scanning using Terraform/Bicep with Azure DevOps/GitHub.
• Support EKS/AKS, container, secrets, and image security.
• Remediate critical cloud security findings and demonstrate security-score improvement.
• Conduct PoC validation, prepare Go/No-Go recommendations, and develop the Phase 1 rollout plan.
• Work directly with CISO, Cloud Ops, SOC, IAM, and AppSec teams.

• 3+ years Cloud Security Engineering experience across AWS and Azure.
• Strong Wiz CNAPP experience; Prisma Cloud, Orca, Lacework, or Defender for Cloud also considered.
• Hands-on experience with CSPM, CIEM, DSPM, CDR, and attack-path analysis.
• AWS IAM, CloudFormation StackSets, Azure Entra ID/App Registration, and RBAC.
• Terraform / Bicep and CI/CD security with Azure DevOps / GitHub.
• EKS / AKS, Kubernetes, container and image security.
• Microsoft Sentinel and ServiceNow integrations.
• Knowledge of CIS, AWS FSBP, Azure Security Benchmark, ISO 27001, and HIPAA.
• Strong client-facing, communication, and stakeholder-management skills.

• Wiz certification/deployment experience, healthcare/medical-device experience, AWS Security Specialty, Azure Security Engineer, CISSP, or CCSP.

For applications and inquiries, contact:View email address on us.fitly.work