Cloud Security Architect
We are seeking a seasoned Cloud Security Architect to join our Wiz security transformation, delivering end-to-end remediation, automation, and governance initiatives across a multi-cloud environment (Azure/AWS) and advancing foundational hardening, proactive security operations, and maturity capabilities.
Responsibilities
- Implement Detective and Corrective Security Controls
- Fix security tools misconfigurations and address coverage gaps
- Review and triage Wiz findings
- Develop cloud security policies and procedures
- Create unified dashboards across Wiz, ServiceNow, CloudWatch
- Build a catalogue of incident response playbooks
- Configure secure CI-CD pipelines
- Fully automate ticketing for critical findings
- Build incident response automation for quarantine, snapshot, analysis
- Enforce least privilege through IAM right-sizing
- Improve identity hygiene
- Enable proactive security monitoring and alerts
- Detect infrastructure drift and auto-repair
- Ensure continuous compliance with automated evidence collection
Requirements
- Minimum 7 years of hands-on experience with Azure; knowledge of AWS is a plus
- Expertise in implementing and operationalizing Wiz, including configuration, findings management, custom policies, integrations
- Proficiency with cloud-native security services such as Azure Policies, Azure Monitor, ServiceNow integrations, log analytics, SOAR workflows
- Terraform proficiency for enforcing configuration baselines and remediation-at-scale
- Skills in designing and implementing secure CI-CD pipelines with pre-deployment scanning and fail-on-error gating
- Competency in Python, PowerShell, or similar for automation, API integrations, custom tooling
- Strong understanding of least-privilege design, identity lifecycle, session management
- Experience creating incident response playbooks, automating response actions, coordinating investigations
- Familiarity with compliance frameworks such as SOC 2, ISO 27001, PCI and continuous compliance tooling
- Ability to collaborate with infrastructure, DevOps, security, and compliance stakeholders, translating complex security requirements into actionable workstreams
- Advanced proficiency in English (B2+/C1)
