What are the responsibilities and job description for the Cloud Security Architect position at Asendion Engineering?
Job Title: Cloud Security Architect
Location: Sterling, VA (Hybrid (Onsite Tue & Wed mandatory, 3 days total))
W2
Project Overview
As a Cloud Security Architect, you will join the WBD Cloud Security team as a thought-leader focused on public cloud security, supporting cloud policy, architectural reviews, and secure cloud implementations. You’ll play a crucial role advising product and engineering teams on security best practices for Azure, AWS, and GCP.
Key Responsibilities
- Act as SME for WBD's InfoSec cloud security initiatives.
- Design and lead implementation of secure architectures across cloud platforms.
- Provide guidance on secure IAM policies and least-privilege access.
- Partner with engineering teams to review cloud and AI/ML architecture for security compliance.
- Create design artifacts (architecture diagrams, documentation, processes).
- Interface with cloud vendors and security providers (e.g., Azure Defender, AWS GuardDuty).
- Mentor junior team members and drive security innovation.
- Stay current with threat mitigation strategies and evolving cloud security practices.
Required Technical Skills
- Hands-on experience securing/building Azure environments.
- Proficiency in Python, Node.js, or Golang.
- Knowledge of IP networking, VPNs, routing.
- Hands-on with:
- Azure Security Administration
- Serverless Application Development & Security
- IaC tools: Terraform, CloudFormation, Ansible
- Command line tools: Bash, PowerShell, AWS CLI
- Docker, Kubernetes
- Cloud-native security tools: Azure Defender, AWS GuardDuty, GCP Security Center
- GitHub Security
Must-Have Experience
- 2 years designing, implementing, and maintaining multi-user systems.
- 2 years reviewing cloud architecture, creating infrastructure diagrams, identifying security issues.
- 2 years managing exceptions and mitigating risks related to cloud misconfigurations.
Preferred Certifications / Skills
- AWS Certifications: Solutions Architect, Security Specialty
- GCP Certifications: Associate Cloud Engineer, Professional Security Engineer
- Security Certifications: CISSP, CompTIA Security
- Experience with Wiz, Splunk, Brinqa, Slack/Jira integrations
Education
- Bachelor’s degree in Computer Science, Information Security, or related field.
- Preferred: Azure Certifications (Fundamentals, Solutions Architect)
Interview Process
- Initial screening with Hiring Manager
- Technical panel with team
- Final round (optional) with VP
Job Type: Contract
Benefits:
- Health insurance
Work Location: On the road