Cloud Security Principal Architect

Overview

Design and secure multi-cloud architectures, conduct assessments, and lead incident response.

Key Responsibilities

• incident response
• cspm management
• iam management
• secure architecture
• security assessments
• ci/cd security

Tasks

-Identify and apply strategies to optimize resource utilization and minimize cost. -Serve as a Subject Matter Expert on Cloud Security related topics, best practices, emerging technologies and the evolving threat landscape. -Lead incident response for cloud environments and contribute to tabletop exercises. -Manage CSPM and Container Security technologies. -Complies with all policies and standards. -Ensure user access and privileged account management to cloud resources is aligned to industry best practices and frameworks. -Provide input to GRC teams on cloud security policies and IAM standards. -Design and implement secure cloud architectures across AWS, Azure, and GCP. -Perform security reviews of cloud architecture, infrastructure, and applications, identify gaps, develop a security risk management plan, and execute strategies to mitigate/address identified risk. -Conduct regular security assessments and ensure compliance with frameworks (NIST, CIS). -Collaborate with developers and DevOps teams to ensure secure CICD and IAC best practices. -Provide guidance, coaching, and support in the development of junior staff members.

Requirements

• 10+ years
• azure
• m365 security
• powershell
• az-104
• leadership

What You Bring

-Certification such as: -A minimum of 10+ years of direct cybersecurity cloud experience in the configuration and support of cloud applications and infrastructure. -M365 Security -Strong analytical skills to assess risks and vulnerabilities in complex systems. -Knowledge of network architectures, including VNETs, subnets, VPNs, and ExpressRoute, along with an understanding of Azure security tools and features like Azure Active Directory, Network Security Groups, and Azure Key Vault. -Collaborative and effective in cross-functional team environments. -Cloud Technology Expertise: demonstrate a working knowledge of various enterprise technology stacks used to build services in the cloud. -Cloud Platform Experience: possess working knowledge and practical experience in security testing within cloud platforms, particularly Azure. -Knowledge of programming languages like Python, .NET, or Java. -Demonstrated knowledge of Azure architecture and core services such as Virtual Machines, Group Policy, MFA, Azure Active Directory, Management Groups, Resource Groups, Azure Regions, Azure Functions, Azure Networking, Azure IPsec Connections, Network Security Groups, Azure VDI, and Firewalls. -Proficiency in scripting and automation for security testing. -Bachelor's Degree in Computer Science, Information Security, and/or a related field or an equivalent combination of education and experience on a year for year basis. -Understanding of modern cloud technology components and deployment patterns: virtual machines, containers, Kubernetes, serverless, infrastructure as code, etc. -Scripting and Programming: skills in scripting languages like PowerShell or Azure CLI for automation. -Knowledge of Azure configuration best practices. -Experience with DevOps and building CI/CD pipelines to support application and infrastructure deployments. -Microsoft Endpoint Manager – Intune and Configuration Manager -Strong leadership, communication, and interpersonal skills. -Microsoft Azure Administration Associate AZ 104 -Microsoft Defender for Cloud -Experience in the configuration and support of Microsoft 365 services including: -Microsoft Identity and Access - Microsoft 365 Active Directory/Entra and ADFS.

People Also Searched For

About Ppl Corporation

-Headquartered in Allentown, Pennsylvania, it operates across Pennsylvania, Kentucky, Virginia, and Rhode Island. -Structured into three regulated segments—Kentucky, Pennsylvania, and Rhode Island—it delivers both electricity and natural gas. -Over recent years, it has invested more than $14 billion (up to $20 billion by 2028) to modernize its grid and strengthen infrastructure. -Typical projects include transmission upgrades, smart-grid technology deployment, and large-scale infrastructure resilience enhancements. -Its grid modernization efforts have earned national recognition, including over 50 J.D. Power awards for customer satisfaction. -Notably, after spinning off non-regulated generation in 2015 and selling UK operations in 2021, it refocused on U.S. utilities and acquired Rhode Island Energy in 2022.

Sector Specialisms