Cloud Architect Lead III

Callouts:
* The manager is open to candidates based in PA, RI and KY. Candidates located in KY will report to the 220 W. Main St., Louisville, KY 40202 office, PA in 645 Hamilton St, Allentown, PA 18101 office and RI in 1595 Mendon Road, Cumberland, RI 02864 office.
* The reporting location will be determined based on the candidate's residence.
* Candidates need to be with in the service area of RI, PA, and KY
* This is a hybrid role. Office days will be Tuesday, Wednesday, and Thursday.
* WIZ experience is a must




Cloud Security Architect Or Cloud Platform Developer with a hands-on coding focus to join our Cybersecurity organization. In this role, you will work closely with our Cloud Engineering team to ensure the security and configuration of the cloud infrastructure, including Azure, AWS, and other cloud service providers. Experience with WIZ Cloud Security for triggering Azure cloud automation scripts. You will have direct responsibility for the usage and monitoring of cyber technology within the cloud environment as well as collaborating on the cloud security strategy. You will provide expert guidance, conduct security assessments, and provide detailed design and implementation of secure cloud architecture. If you are passionate about cloud security and have a deep understanding of modern cloud security concerns like secure configurations, container security, and cloud incident response, this position is ideal for you.




ESSENTIAL FUNCTIONS:
Design and implement secure cloud architectures across AWS, Azure, and GCP.
Experience and Proficient in developing Azure Cloud Automation code with the WIZ Platform
Hands on experience with the entire devOps toolchain for run IAC automations through WIZ or GitHub
Conduct regular security assessments and ensure compliance with frameworks (NIST, CIS).
Lead incident response for cloud environments and contribute to tabletop exercises.
Collaborate with developers and DevOps teams to ensure secure CICD and IAC best practices.
Ensure user access and privileged account management to cloud resources is aligned to industry best practices and frameworks.




Provide input to GRC teams on cloud security policies and IAM standards.
Perform security reviews of cloud architecture, infrastructure, and applications, identify gaps, develop a security risk management plan, and execute strategies to mitigate/address identified risk.
Manage CSPM and Container Security technologies with hands on experience.
Serve as a Subject Matter Expert on Cloud Security related topics, best practices, emerging technologies and the evolving threat landscape.
Identify and apply strategies to optimize resource utilization and minimize cost.
Provide guidance, coaching, and support in the development of junior staff members.
Performs other duties as assigned.
Complies with all policies and standards.




Qualification
REQUIRED EDUCATION:
Bachelor's Degree in Computer Science, Information Security, and/or a related field or an equivalent combination of education and experience on a year for year basis.




REQURIED EXPERIENCE:
A minimum of 10+ years of direct cybersecurity or security / automation IAC cloud policy experience in the configuration and support of cloud applications and infrastructure.
Experience in the configuration and support of Microsoft 365 services including:




Microsoft Endpoint Manager Intune and Configuration Manager
Microsoft Defender for Cloud
Microsoft Identity and Access - Microsoft 365 Active Directory/Entra and ADFS.
Understanding of modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc.




Demonstrated knowledge of Azure architecture and core services such as Virtual Machines, Group Policy, MFA, Azure Active Directory, Management Groups, Resource Groups, Azure Regions, Azure Functions, Azure Networking, Azure IPsec Connections, Network Security Groups, Azure VDI, and Firewalls.
Experience with DevOps and building CI/CD pipelines to support application and infrastructure deployments.
Scripting and Programming: skills in scripting languages like Python, IAC, PowerShell or Azure CLI for automation.
Knowledge of network architectures, including VNETs, subnets, VPNs, and ExpressRoute, along with an understanding of Azure security tools and features like Azure Active Directory, Network Security Groups, and Azure Key Vault.
Strong leadership, communication, and interpersonal skills.
Collaborative and effective in cross-functional team environments.




Strong analytical skills to assess risks and vulnerabilities in complex systems.




PREFERRED QUALIFICATIONS:
Experience with: Azure Scripting and IAC scription is required, this hands on role to establish the initial patterns that will scale to teams.
Knowledge of programming languages like Python, .NET, or Java.
Cloud Technology Expertise: demonstrate a working knowledge of various enterprise technology stacks used to build services in the cloud.
Cloud Platform Experience: possess working knowledge and practical experience in security testing within cloud platforms, particularly Azure.
Proficiency in scripting and automation for security testing.
Knowledge of Azure configuration best practices.




Certification such as:
M365 Security
Microsoft Azure Administration Associate AZ 104
Microsoft Azure Network Engineer Associate Engineer
Microsoft Azure Security Engineer Associate AZ 500

• Engineering Role: IICIT01