Security & Infrastructure Architect

Accountabilities:: Define and maintain secure configuration standards across AWS and Azure, covering identity and access management, network boundaries, encryption, logging, secrets management, and workload protection. Assess cloud environments against established security baselines, identify gaps, and prioritize remediation activities. Translate assessment findings into actionable technical recommendations and implementation guidance for engineering teams. Partner with platform, infrastructure, and site reliability engineering teams to embed security requirements into new cloud services and infrastructure-as-code workflows. Review cloud architecture proposals and infrastructure-as-code changes for security risks before implementation. Maintain and evolve cloud security standards as platforms, services, and organizational requirements change. Develop hardened configuration baselines for operating systems, cloud services, and infrastructure using DISA STIGs, CIS Benchmarks, or equivalent standards. Define scan and monitoring coverage in alignment with authorization boundaries, ensuring newly deployed systems are appropriately included. Create and maintain architecture standards, reference patterns, technical diagrams, and design decision records. Review infrastructure, platform, and integration designs, identifying security concerns early enough to influence technical decisions. Maintain accurate current-state architecture documentation across cloud environments, identity systems, endpoints, SaaS platforms, networks, and integrations. Translate security and compliance requirements into technical configurations and design guidance that IT Operations and engineering teams can implement. Provide Compliance teams with architecture documentation and technical evidence to support System Security Plans, audits, and ongoing assessments. Identify opportunities to use automation and AI tools to improve security assessments, configuration checks, evidence collection, and overall productivity. Requirements: At least 5 years of experience in cloud engineering, infrastructure, systems engineering, or security engineering. At least 3 years in an architecture, senior engineering, or technical design role focused on establishing standards and guiding implementation. Strong hands-on expertise in AWS or Azure security configuration, together with working knowledge of the other platform. Experience reviewing or developing infrastructure as code, particularly with Terraform. Familiarity with cloud security posture management tools and the ability to distinguish meaningful security findings from false positives or low-priority alerts. Practical experience implementing hardened configuration baselines using DISA STIGs, CIS Benchmarks, or comparable frameworks. Working knowledge of continuous monitoring requirements under FedRAMP or GovRAMP, including scan coverage and evidence expectations. Experience automating configuration validation, security checks, or compliance evidence collection. Familiarity with enterprise IT environments and tools, including Microsoft 365, Entra ID, Active Directory, Okta, MDM/UEM platforms, EDR, and SIEM solutions. Strong technical documentation skills, including architecture diagrams, standards, decision records, and design reviews. Familiarity with compliance frameworks such as GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001. Ability to influence technical decisions through sound judgment and clear communication, even without direct ownership of the teams involved. Good judgment in determining when to escalate security concerns and when to defer to the accountable technical team. An AI-forward mindset, with demonstrated experience using AI tools responsibly to improve productivity, decision-making, and work quality. Strong analytical, problem-solving, communication, and cross-functional collaboration skills. Authorization to work in the United States; visa sponsorship is not available now or in the future. Benefits: Estimated salary grade range: $104,400–$156,600. Anticipated hiring range: $115,000–$125,000, depending on skills, qualifications, experience, and other relevant factors. Comprehensive health insurance. Dental and vision insurance. Flexible Time Off. 401(k) retirement plan. Additional benefits as part of the comprehensive employee package. Remote work arrangement within the United States.