Cloud Security Architect
system oneColumbia (SC)
About the role
Cloud Security ArchitectLead security architecture and threat modeling for complex enterprise applications, with a strong focus on AI and agentic AI solutions.
Evaluate applications, APIs, cloud platforms, SaaS solutions, and distributed systems to identify security risks and define effective controls.
Work with product owners, enterprise architecture, engineering, and security teams to protect sensitive data, strengthen identity and access controls, secure cloud environments, and support compliance with enterprise policies and industry standards.
no C2C with 3rd parties - W2 candidates only.
Must be able to work on site 5 days a week - no remote work.
Qualifications:
Strong AWS expertise and the ability to lead multiple security initiatives across IaaS, SaaS, and internally developed applications.
Extensive experience with security architecture and threat modeling for complex enterprise applications
Strong knowledge of STRIDE, attack trees, abuse cases, data flow analysis, and trust boundary analysis
Hands on experience evaluating security risks in AI, machine learning, and agentic AI applications
Advanced AWS knowledge across IAM, networking, compute, storage, RDS, messaging, serverless, ECS/EKS, CI/CD, and AI/ML services
Strong understanding of application security, API security, IAM, authentication, authorization, encryption, key management, and data protection
Experience translating identified threats into practical security controls and remediation recommendations
Knowledge of DevSecOps, pipeline security, container security, infrastructure security, SIEM, CSPM, and CWPP solutions
Familiarity with security frameworks and standards such as NIST, OWASP, CIS, FedRAMP, ISO, and SOX
Experience with resilient, highly available, API driven, stateless, and integrated cloud or SaaS environments
Ability to lead multiple initiatives and communicate effectively with technical and business stakeholders
Preferred certifications include CISSP, CCSP, AWS Professional or Specialty certifications, or equivalent credentials
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.