breakthru
Director Cloud Security Architecture & Engineering
- Compensation
- Not disclosed
- Location
- Linthicum MD USA
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in computer science, information systems, or information technology, or equivalent work experience.
- Minimum 12 years of IT Security experience, with 5 years focused on AWS architecture
- AWS Solutions Architect – Associate Certification
- AWS Security Specialty
- CISSP Certification
- Deep expertise in AWS-native and third-party security tools
- Strong understanding of cloud governance, infrastructure as code (IaC), encryption, networking, and identity management.
- Strone experience with Snowflake and S/4HANA
- Hands-on scripting and automation (Python, Terraform)
- Strong experience with Splunk
- Experience with multi-cloud environments (AWS, Azure, M635)
- Strong writing and communication skills across technical and executive audiences
- Experience with leading and team management
- Ability to multi-task, work independently and/or within a team, pay attention to detail and meet deadlines.
- Utilize sound judgement, business acumen and problem-solving skills and ability to work in fast-paced, high-volume, team environment.
- Ability to work nights, weekends and holidays
Nice to have
- AWS Solutions Architect – Professional Certification
- CCSP Certification
- Master’s degree
Full description
Are you a current Associate? To be considered, you must submit your application through the internal Career Portal (Jobs Hub). Click here to access.
Time Type:
Full time
Remote Type:Job Family Group:
Information Technology
Job Description Summary:
We are seeking an experienced Director, Cloud Security Architecture and Engineering to serve as a hands-on leader, providing both strategic direction and active technical contribution. This role will lead and work alongside a cloud security architecture and engineering team, directly designing, implementing, and evolving a multi-cloud, hybrid security architecture across AWS, Azure, multiple SaaS providers, and operational technology environments
Job Description:Job Responsibilities:
Cloud Security Architecture and Engineering
- Own and evolve the enterprise cloud security architecture across AWS, SaaS platforms, hybrid infrastructure, applications, networking, and operational technologies, ensuring alignment with business strategy and risk tolerance.
- Define and implement AWS-native security architectures including identity, encryption, network segmentation, logging, detection, and governance capabilities, to enable secure and scalable cloud adoption.
- Support the re-architecture and migration of Azure workloads to AWS, ensuring security-by-design principles are embedded throughout the migration lifecycle.
- Design, implement and enforce Zero Trust security models to ensure protection of cloud and hybrid environments.
Integration & Engineering Collaboration
- Integrate AWS with enterprise security platforms such as Zscaler, Splunk, and BeyondTrust to enable centralized visibility, control and response.
- Collaborate with DevOps and cloud infrastructure teams to embed security into DevOps pipelines, leveraging automation for vulnerability management, code scanning, configuration validation and continuous compliance.
- Support the establishment and oversee cloud identity and access management (IAM) strategies, including federation, least privilege, just in time access, identity governance, and Zero Trust principles. Integrate with multiple IdPs including Entra ID and SAP IAS.
Governance, Risk and Compliance (GRC)
- Establish tailored governance, risk, and compliance (GRC) frameworks for cloud adoption, including policy-as-code and automated compliance monitoring aligned to industry standards and regulatory requirements.
- Develop templates, accelerators, and reusable security artifacts that improve delivery speed, consistency, and compliance across cloud initiatives for BBG.
- Monitor emerging cloud services, regulatory changes, and threat trends to proactively assess risk and advise leadership on security posture and mitigation strategies.