Principal Cloud Security Architect

Description

• Collaborate with IT and product security teams to ensure compliance with security frameworks (e.g., ISO 27001, NIST, OWASP, or similar).
• Evaluate new technologies, frameworks, and tools for secure and efficient deployment.
• Work closely with firmware, backend, and cloud engineering teams to define interfaces and data security requirements.
• Partner with product management and operations to align architecture with product roadmaps and reliability goals.
• Establish and maintain secure coding and deployment standards.
• Perform code reviews and threat modeling for embedded, backend, and cloud software.
• Evaluate and coordinate efforts to establish integrated solutions between multiple product-specific systems.
• Drive adoption of DevSecOps principles and security automation throughout CI/CD pipelines.
• Evaluate and document end-to-end system architectures integrating embedded, edge, and cloud components.

Requirements

• Ability to balance innovation with compliance and operational reliability.
• Excellent communication skills for cross-functional collaboration.
• Background in industrial IoT, energy systems, or mission-critical control environments.
• Security certifications such as CISSP, CEH, CSSLP, or AWS/Azure Security Specialty.
• Experience with zero-trust architectures, identity management (OAuth2, JWT, IAM), and secure OTA updates.
• Familiarity with infrastructure-as-code (Terraform, CloudFormation) and container orchestration (Kubernetes, Docker) and the key methods of baking security into those products.
• Experience: 7-10+ years of professional experience in software architecture, system design, or cybersecurity engineering.
• Proven experience designing distributed or hybrid cloud systems (AWS, Azure, or GCP).
• Knowledge of common vulnerabilities and exposures (CVEs), and mitigation strategies in both embedded and cloud contexts.
• Experience implementing effective CI/CD scanning and analysis tools.
• Hands-on coding experience in one or more modern languages (Python, C/C++, Go, Java, or Rust).
• Strong understanding of embedded software principles, real-time systems, and device-to-cloud communication (MQTT, REST, gRPC, etc.).
• Education: Bachelor’s or Master’s degree in Computer Science, Electrical Engineering, Software Engineering, or related field.
• Contributions to open-source security tools or frameworks.
• Experience evaluating and enforcing secure coding design, particularly in evaluating risks in deploying cloud-connected embedded devicies.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance