Cloud Security Architect

Summary: The Opportunity Hyatt Hotels Corporation seeks seeks an enthusiastic Cloud Architect / Solutions Engineer to join our Data Platform and Architecture team. The ect will be hands on and lead the design, implementation, monitoring, and security of Hyatt's AWS-based microservices, hybrid cloud, and multi-cloud infrastructure. This role will help modernize enterprise platforms, strengthen cloud security, improve operational resiliency, and support the design of AI agent solutions that enhance engineering productivity, operational efficiency, data intelligence, and business process automation. This role will collaborate closely with offshore engineering teams, internal engineering teams, security stakeholders, infrastructure teams, data teams, and business partners to ensure cloud, hybrid cloud, and AI-enabled solutions are scalable, secure, cost-efficient, resilient, and maintainable. The ideal candidate brings deep hands on AWS expertise, practical Google Cloud Platform experience, strong microservices architecture knowledge, hybrid cloud experience, a security-first mindset, Zero Trust experience, and practical knowledge of AI agents, Snowflake Cortex, automation patterns, and responsible AI implementation. You will be a part of a ground-floor, hands-on, highly visible team which is positioned for growth and is highly collaborative and passionate about data. We are looking for highly motivated AWS expert who excited about leveraging his skills and his strategic ideas to improve mission execution, who is passionate about creating an amazing user experience that delights end-users and makes their jobs easier. This candidate builds fantastic relationships across all levels of the organization and is recognized as a problem solver who looks to elevate the work of everyone around them. You will be part of a team that is passionate about our purpose, committed to nurturing curiosity and new skills, and building connections across the organization with colleagues, customers, and guests.

Who We Are At Hyatt, we believe in the power of belonging and creating a culture of care, where our colleagues become family. Since 1957, our colleagues and our guests have been at the heart of our business and helped Hyatt become one of the best and fastest-growing hospitality brands in the world. Our transformative growth and the addition of new hotels, brands, and business lines can open the door for exciting career and growth opportunities for our colleagues. As we continue to grow, we never lose sight of what's most important: People. We turn trips into journeys, encounters into experiences, and jobs into careers.

Why Now? This is an exciting time to be at Hyatt. We are growing rapidly and are looking for passionate changemakers to be a part of our journey. The hospitality industry is resilient and continues to offer dynamic opportunities for upward mobility, and Hyatt is no exception.

How We Care for Our People What sets us apart is our purpose-to care for people so they can be their best. Every business decision is made through the lens of our purpose, and it informs how we have and will continue to support each other as members of the Hyatt family. Our care for our colleagues is the key to our success. We're proud to have earned a place on Fortune's prestigious 100 Best Companies to Work For list since 2013. This recognition is a testament to the tremendous way our Hyatt family continues to come together to care for one another, our commitment to a culture of inclusivity, empathy, and respect, and making sure everyone feels like they belong. We're proud to offer exceptional corporate benefits which include: Annual allotment of free hotel stays at Hyatt hotels globally Flexible work schedule Work-life benefits including wellbeing initiatives such as a complimentary Headspace subscription, and a discount at the on-site fitness center A global family assistance policy with paid time off following the birth or adoption of a child as well as financial assistance for adoption Paid Time Off, Medical, Dental, Vision, 401K with company match

Who You Are As our ideal candidate, you understand the power and purpose of our culture of care, and embody our core values of Empathy, Inclusion, Integrity, Experimentation, Respect, and Wellbeing. You enjoy working with others, are results-driven, and are looking for a variety of opportunities to develop personally and professionally.

The Role Duties and responsibilities include, but are not limited to, the following:

• Design and implement scalable, secure, and cost-efficient AWS microservices infrastructure to support enterprise application modernization and cloud-native platforms.
• Hands-on experience with Amazon Bedrock or similar generative AI platforms for building secure, scalable AI agents, enterprise copilots, retrieval-augmented generation workflows, and automation solutions.
• Architect hybrid and multi-cloud solutions that securely connect AWS, Google Cloud Platform, on-premises systems, enterprise networks, identity providers, internal platforms, data platforms, and third-party services.
• Lead cloud, hybrid cloud, and multi-cloud architecture decisions across compute, networking, databases, storage, observability, security, identity, access management, data integration, and deployment patterns.
• Apply Zero Trust principles across cloud and hybrid environments, including strong identity verification, least privilege access, network segmentation, continuous monitoring, and secure access controls.
• Monitor and guide offshore engineering teams during implementation activities, ensuring alignment with security standards, performance benchmarks, architecture principles, Zero Trust practices, and project timelines.
• Serve as the technical liaison between internal engineering teams, offshore contractors, infrastructure teams, security teams, data teams, and business stakeholders.
• Architect secure integrations between enterprise systems, cloud-native microservices, APIs, data platforms, AI services, and internal applications, ensuring seamless functionality, data integrity, resiliency, and protection against vulnerabilities.
• Educate and upskill internal engineering teams on AWS fundamentals, microservices concepts, hybrid cloud considerations, Google Cloud Platform integration patterns, Zero Trust security practices, operational best practices, and secure cloud development.
• Set up and manage monitoring, logging, and alerting solutions such as Amazon CloudWatch, Google Cloud Observability, Datadog, Prometheus, Grafana, or ELK Stack to track application health, infrastructure performance, access patterns, and security posture.
• Implement and enforce AWS and cloud security best practices, including IAM least privilege, VPC segmentation, encryption at rest and in transit, secure security group configurations, key management, workload isolation, and identity-based access controls.
• Use AWS security services such as AWS WAF, Shield, KMS, GuardDuty, Security Hub, IAM Access Analyzer, and related tools to reduce cloud risk and improve threat detection.
• Support secure Google Cloud Platform architecture patterns where applicable, including identity and access management, network segmentation, workload security, encryption, logging, monitoring, and integration with enterprise security controls.
• Optimize cloud resource usage across AWS, Google Cloud Platform, and related platforms to balance performance, reliability, security, and cost, while providing regular reporting on cloud usage, risks, and optimization opportunities.
• Proactively identify and address security risks before, during, and after implementation, including regular reviews of cloud environments, hybrid integrations, identity controls, architecture decisions, AI integrations, and contractor deliverables.
• Design AI agent architectures that can support internal engineering, operations, knowledge retrieval, workflow automation, customer-facing capabilities, data-driven insights, and business process improvements.
• Evaluate AI agent platforms, frameworks, and integration patterns, including orchestration, tool use, APIs, workflow automation, guardrails, observability, and human-in-the-loop review.
• Design and support enterprise data architectures leveraging Snowflake, including secure data sharing, data products, governed data access, workload optimization, and scalable analytics platforms.
• Partner with data engineering and analytics teams to architect Snowflake solutions utilizing Snowpark, Dynamic Tables, Streams, Tasks, and data pipelines that support real-time and batch processing requirements.
• Evaluate and implement Snowflake-native AI and data engineering capabilities, including Cortex AI, Cortex Search, Cortex Analyst, Snowpark ML, and emerging platform services to support business intelligence, automation, and AI-enabled applications.
• Support architecture and integration patterns involving Snowflake Cortex, Snowflake data services, and AI-enabled data workflows to help enable secure analytics, automation, and intelligent enterprise capabilities.
• Partner with security, legal, compliance, data governance, and business teams to ensure AI agent solutions follow Hyatt standards for data privacy, confidentiality, integrity, responsible AI, secure system design, and Zero Trust principles.
• Define best practices for integrating AI agents with enterprise systems, APIs, cloud services, Snowflake, internal knowledge sources, and hybrid cloud environments while minimizing data exposure and operational risk.
• Support CI/CD, infrastructure-as-code, and DevSecOps practices to enable reliable, repeatable, and secure deployments.
• Perform daily duties in line with Hyatt Information Security Policies and Procedures.
• Ensure that information confidentiality, integrity, and privacy are always maintained when processing information assets.
• Other duties as assigned.

Qualifications:

Experience Required: 8+ years of experience within the field of application/platform engineering or related technical work including business intelligence, analytics. 6+ years of experience with AWS Senior Cloud Data Engineering, management, maintenance, or architecting, implementing best practices and industry standards. Thesalaryrangeforthispositionis$135,000 -160,000.Thispositionisalsoeligibletoearnanannualbonus. Thefinalpayrate/salaryofferedtothesuccessfulcandidatewilldependonexperience,skilllevelandotherqualificationsfortherole,aswellasthelocationoftheperformanceofwork.Payforthesuccessfulcandidatewillmeetlocalrequirements,includingthelocalminimumwagerate.

Experience Preferred: Proven experience designing, implementing, and securing AWS-based cloud infrastructure. Hands-on experience with hybrid cloud architecture, including secure connectivity between AWS, Google Cloud Platform, on-premises systems, enterprise networks, identity platforms, internal applications, data platforms, and third-party services. Advance Computer Science degree. Relevant certifications Working knowledge of Google Cloud Platform services and architecture patterns, including cloud networking, IAM, compute, storage, logging, monitoring, and secure integration with enterprise environments. Experience applying Zero Trust security principles across cloud, hybrid cloud, application, network, data, and identity environments. Proficiency with AWS services including EC2, ECS/EKS, Lambda, API Gateway, RDS, DynamoDB, S3, CloudFormation, CloudWatch, IAM, VPC, KMS, WAF, GuardDuty, and related services. Hands-on experience designing and deploying secure microservices architectures. Experience supporting enterprise application modernization, cloud-native platform design, and multi-cloud integration. Experience securing APIs, distributed systems, cloud workloads, containers, databases, identity integrations, data pipelines, and network architectures. Experience with monitoring and observability platforms such as CloudWatch, Google Cloud Observability, Datadog, Prometheus, Grafana, or ELK Stack. Strong understanding of AWS and cloud security best practices, including IAM least privilege, encryption, vulnerability management, threat detection, incident response, compliance alignment, and secure access patterns. Practical knowledge of AI agent architecture, including LLM-based workflows, tool calling, API integrations, retrieval-augmented generation, automation design, governance, and guardrail implementation. Familiarity with Snowflake Cortex, Snowflake data platforms, or AI-enabled data workflows for analytics, automation, enterprise search, or intelligent application use cases. Experience with Snowflake platform architecture, administration, performance tuning, workload optimization, and cost management. Experience integrating Snowflake with AWS services, APIs, data lakes, enterprise applications, and AI platforms. Experience designing and implementing Snowflake security controls, governance frameworks, data classification, masking policies, and regulatory compliance requirements. Ability to assess AI use cases for feasibility, security, privacy, data governance, business value, and operational risk. Experience overseeing contractors, mentoring internal teams, and promoting secure engineering practices. Strong analytical and troubleshooting skills across cloud deployments, hybrid cloud integrations, application modernization, identity flows, data integrations, and security vulnerabilities.

The position responsibilities outlined above are in no way to be construed as all-encompassing. Other duties, responsibilities, and qualifications may be required and/or assigned as necessary.

We welcome you: Research shows that individuals tend to apply to jobs only if they meet all the listed job qualifications. Unsure if you check every box, but feeling inspired to enhance your career? Apply. We'd love to consider your unique experiences and how you could make Hyatt even better.

We value our relationships with recruitment partners and require that agencies contact us first before submitting any candidates. Hyatt will not be responsible for any fees and obligations associated with unsolicited submissions unless a formal agreement is in place.

For applications and inquiries, contact:View email address on us.fitly.work