Cloud Architect Lead (Wiz) (Allentown)

Cloud Architect Lead III

Contract: 12 Months

Pay Rate: $75–$92/hour

Schedule: Monday–Friday, 8:00 AM–4:30 PM

Work Arrangement: Hybrid — Tuesday, Wednesday & Thursday onsite

Location: Allentown, PA/Providence, RI/Louisville, KY

Employment Type: Contract, Full-Time

Position Overview

We are seeking a Cloud Architect Lead III with a strong background in cloud security, Azure, automation, and Infrastructure as Code (IaC) to support a large enterprise cybersecurity organization.

This is a hands-on role focused on designing, implementing, and securing cloud infrastructure across Azure, AWS, and GCP . The ideal candidate will have strong experience with Wiz Cloud Security , Azure automation, DevOps, CI/CD, cloud security architecture, and scripting.

The successful candidate will work closely with cloud engineering, development, DevOps, and cybersecurity teams to establish secure cloud architecture patterns and develop scalable automation solutions.

Key Responsibilities

• Design and implement secure cloud architectures across Azure, AWS, and GCP.
• Develop and maintain Azure cloud automation using the Wiz platform.
• Build and implement Infrastructure as Code (IaC) and automation solutions through Wiz, GitHub, and DevOps tooling .
• Conduct cloud security assessments and identify configuration, architecture, and security gaps.
• Support cloud incident response and participate in security tabletop exercises.
• Collaborate with development and DevOps teams to implement secure CI/CD and IaC practices .
• Establish and maintain secure identity, access, and privileged account management practices.
• Support cloud security policies, IAM standards, and governance initiatives.
• Review cloud architecture, infrastructure, and applications for security risks and vulnerabilities.
• Develop and execute strategies to mitigate identified security risks.
• Manage and support CSPM and container security technologies .
• Serve as a subject matter expert on cloud security architecture, emerging technologies, and security best practices.
• Identify opportunities to optimize cloud resource utilization and costs.
• Provide technical guidance and mentorship to junior team members.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• 10+ years of experience in cybersecurity, cloud security, security automation, IaC, or cloud infrastructure.
• Hands-on Wiz Cloud Security experience is required.
• Strong hands-on experience with Microsoft Azure and Azure security.
• Experience developing Azure automation using Python, PowerShell, Azure CLI, or similar technologies .
• Experience with Infrastructure as Code, including Terraform, Bicep, ARM, or similar tools .
• Experience with DevOps practices and CI/CD pipelines .
• Experience with GitHub or similar source-control and DevOps platforms.
• Understanding of cloud technologies including virtual machines, containers, Kubernetes, serverless technologies, and IaC.
• Strong understanding of Azure architecture and services, including:
• Virtual Machines
• Azure Functions
• Management Groups
• Resource Groups
• Azure Networking
• Network Security Groups
• Azure Firewall
• Azure VDI
• Azure Key Vault
• Azure regions and connectivity
• Experience with cloud identity and access management, including Microsoft Entra ID/Azure AD, MFA, and privileged access management .
• Understanding of cloud networking, including VNETs, subnets, VPNs, IPsec, and ExpressRoute .
• Strong analytical and problem-solving skills.
• Strong communication and cross-functional collaboration skills.

Preferred Qualifications

• Experience with Microsoft Defender for Cloud.
• Experience with Microsoft Intune / Endpoint Manager and Configuration Manager.
• Experience with Microsoft 365 security services.
• Experience with container and Kubernetes security.
• Experience with Python, .NET, or Java.
• Experience with cloud security testing and vulnerability management.
• Knowledge of Azure configuration and security best practices.
• Relevant Microsoft certifications, such as:
• Azure Security Engineer Associate (AZ-500)
• Azure Administrator Associate (AZ-104)
• Azure Network Engineer Associate
• Microsoft 365 Security certifications