cloud security threat modeler (service & api patterns)

customer engineer, data management, retail, google cloud

merchandising/sales representative, seattle

account-based marketing manager, retail and cpg, industry marketing

software development engineer Jobs in Seattle

software development engineer

ai engineer (intern)

cloud platform software engineer Jobs in Seattle

cloud platform software engineer

cloud security threat modeler (service & api patterns) Jobs in Seattle

customer engineer, data management, retail, google cloud Jobs in Seattle

cloud security architect

JPMorganChase

<div>JOB DESCRIPTION 
Take your engineering expertise to new heights by joining a team of exceptionally talented professionals and solidify your place among top performers in the industry. 
As a Principal Cybersecurity Architect at JPMorganChase within the Cybersecurity Technology and Controls, you provide expertise to enhance and develop architecture platforms based on modern cloud-based technologies as well as support the adoption of strategic global solutions. Leverage your advanced architecture capabilities to identify, communicate, and mitigate risk, and collaborate with colleagues across the organization to drive best-in-class outcomes.
Job responsibilities
<ul><li>Design, develop, and maintain complex, scalable, and reusable software frameworks, ensuring they meet industry standards for reliability, efficiency, and performance.</li><li>
Lead the creation and adoption of coding patterns and best practices across the organization&rsquo;s development community, driving standardization and consistency.</li><li>
Architect and implement robust, secure, and high-performance frameworks for both cloud and on-premises environments, leveraging cloud-native services (e.g., AWS).</li><li>
Provide technical thought leadership, staying abreast of industry trends, emerging technologies, and best practices to guide the team and organization.</li><li>
Identify existing drawbacks, gaps, and inefficiencies in frameworks, processes, and practices; proactively recommend and implement improvements.</li><li>
Serve as a subject matter expert and advisor on technological matters, influencing technical decisions and strategy across business, product, and technology teams.</li><li>
Lead proof-of-concept (POC) initiatives to evaluate new technologies and methodologies for potential adoption.</li><li>
Implement and manage IAM protocols and standards such as RBAC, OAuth2.0, SCIM, Authentication, WebAuthN, Authorization, OPA, and PBAC.</li><li>
Apply advanced security principles, including encryption, data security, and risk management, to all IAM solutions and processes.</li><li>
Stay abreast of emerging IAM technologies and security trends, recommending and implementing improvements to enhance security posture.</li><li>
Drive innovation by exploring and integrating cutting-edge technologies (e.g., cloud, streaming) into frameworks and products. Mentor and guide engineering teams, fostering a culture of continuous learning, technical excellence, and talent development.</li></ul>
Required qualifications, capabilities and skills<ul><li>
Formal training or certification in software engineering concepts, with 10+ years of applied experience in system design, application development, testing, and operational stability, and strong focus on IAM architecture and implementation.</li><li>
Demonstrated success in leading large-scale IAM projects in complex environments.</li><li>
Deep expertise in software development using Java, Python, Node, or Golang.</li><li>
Deep understanding of encryption, data security, and risk management.</li><li>
Expertise in IAM principles: RBAC, OAuth2.0, SCIM, Authentication, WebAuthN, Authorization, OPA, PBAC.</li><li>
Proven experience building performant, scalable, and reliable microservices and frameworks for both cloud (AWS) and on-premises deployments.</li><li>
Advanced knowledge of API design, development, and security, with hands-on experience in enterprise-grade API solutions.</li><li>
Proficiency in Relational database skills, including SQL, data modeling, and experience with high availability database architectures.</li><li>
Advanced knowledge and hands-on experience with streaming technologies (Kafka, RabbitMQ, etc.) and s strong experience with CI/CD pipelines, cloud-native development (AWS Lambda, ECS, S3, Aurora, API Gateway), and DevOps practices.</li><li>
Demonstrated ability to think strategically, develop and execute technical strategies, and drive organizational objectives. Ability to communicate effectively and present technical concepts to senior leaders and executives.</li><li>
Proven track record of technical thought leadership, including identifying and addressing technical and process gaps, and elevating team capabilities using excellent analytical, problem-solving, and decision-making skills.</li></ul>
Preferred Qualifications, Capabilities, and Skills:<ul><li>
Strategic thinker with a proactive approach to problem-solving.</li><li>
Strong organizational and project management skills.</li><li>
Commitment to continuous learning and professional development.</li></ul>
<div>#CTC</div>
ABOUT US 
<div>
<div>JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world&rsquo;s most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management.
</div><div>We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process.
<div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants&rsquo; and employees&rsquo; religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.
JPMorgan Chase &amp; Co. is an Equal Opportunity Employer, including Disability/Veterans 
</div></div></div> 
 
ABOUT THE TEAM 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we&rsquo;re setting our businesses, clients, customers and employees up for success.</div>

Principal Cybersecurity Architect -IAM, Golang

lululemon

Who we are
 
lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.
 
About this team
 
The Security Architecture group at lululemon is responsible for guiding the design and implementation of technical strategies that support every aspect of our rapidly scaling global business. You will work in a matrixed environment alongside peers in business, engineering, program, ux and strategy - among other disciplines - to collaboratively develop and deliver industry leading technology solutions aligned to business goals and objectives. In addition to your primary team, project, or portfolio you will be supported by a diverse Architecture Community of Practice, which provides learning and governance resources to all architects and will help you build a strong and robust practice of leadership grounded in technical proficiency, innovative thinking and empathy.
 
core responsibilities
 
As a Lead Architect for Data & AI Security, you will be responsible for defining, governing, and advancing secure-by-design patterns across lululemon’s data platform and AI/ML ecosystems. This role bridges enterprise architecture, cybersecurity, and engineering to ensure security is at the center of our growing data estate and AI adoption. You will partner closely with the Senior Technology Manager, Data & AI Security, and serve as a hands-on architecture leader influencing platform design, engineering standards, and delivery outcomes across multiple portfolios. You will work with other architects and functional leaders to ensure that all designs are clear and complete for successful execution. From solving large complex design problems to leading engineers and architects through delivery & implementation, you will act as a key technical leader, driving alignment and clarity across multiple stakeholder groups.
 <ul>
<li>Provide architecture delivery support across multiple teams within your delivery unit and actively drive solution alignment between Architects, Security Engineers, Program Managers, and Product, Business & Engineering leadership</li>
<li>Act as solution design lead for large, complex or mission critical projects and initiatives that requires cross-team collaboration spanning an entire Director+ level organization</li>
<li>An accomplished individual contributor, as a Lead Architect you now focus on working through others to achieve delivery goals and drive successful business outcomes.</li>
<li>Represent architectural perspectives and needs during cross-functional roadmap development. Proactively seek and drive alignment with multiple Product Managers or primary Business stakeholders; Ensure that product/business solutions align to organizational technology strategy.</li>
<li>Define secure-by-design architectures for data platforms and AI/ML systems across cloud environments.</li>
<li>Establish and apply data and AI security standards, guardrails, and reference architectures aligned to risk and regulatory needs.</li>
<li>Lead secure data lifecycle design, including classification, access control, encryption, and retention.</li>
<li>Architect and review secure AI/ML lifecycle patterns, including model governance and protection controls.</li>
<li>Apply threat modeling and zero trust principles to complex data and AI initiatives.</li>
<li>Partner with engineering and platform teams to embed security into solution design and delivery.</li>
</ul>
Qualifications: 
<ul>
<li>BS / BA in technology related discipline or relevant industry experience</li>
<li>Minimum 10 years experience developing, deploying, scaling and maintaining software systems. A majority of this experience comes from working in and around cloud-based services.</li>
<li>Deep hands-on experience using compute, networking, storage, and database components in one of the major cloud platforms: Amazon AWS (preferred), Microsoft Azure (preferred), GCP or Alibaba Cloud</li>
<li>Demonstrated ability and willingness to lead through others</li>
<li>Able to design for specific security threat models; able to describe basic and advanced security and compliance aspects of cloud platform primitives.</li>
<li>Be able to describe the key services of a given cloud platform and be able to select appropriately for given use cases, e.g. compute, storage, analytics, etc.</li>
<li>Deep expertise in data security architecture, including data classification frameworks, data loss prevention concepts, encryption strategies, key management, and secure data sharing patterns.</li>
<li>Strong understanding of AI/ML security concepts, including secure model lifecycle management, AI governance, model risk, and emerging threats specific to AI systems.</li>
<li>Proven experience designing security controls aligned to global regulatory and privacy frameworks (e.g., GDPR, CCPA, SOX, PCI, NIST) within data and analytics platforms.</li>
<li>Demonstrated ability to apply zero trust principles and data-centric security models within complex, distributed architectures.</li>
<li>Strong architectural documentation and communication skills, with the ability to influence senior technical and business stakeholders without direct authority.</li>
<li>Experience operating in highly matrixed environments, balancing delivery velocity with risk management and long-term architectural integrity.</li>
</ul>
additional notes
 
Authorization to work in the United States is required for this role.
 
compensation and benefits package
 
lululemon’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. The typical hiring range for this position is from $ $166,000-$215,250 annually; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.
 
At lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedication, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:
 <ul>
<li>Extended health and dental benefits, and mental health plans</li>
<li>Paid time off</li>
<li>Savings and retirement plan matching</li>
<li>Generous employee discount</li>
<li>Fitness & yoga classes</li>
<li>Parenthood top-up</li>
<li>Extensive catalog of development course offerings</li>
<li>People networks, mentorship programs, and leadership series (to name a few)</li>
</ul>
Note: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.
 
workplace arrangement
 
Hybrid
 
In-person collaboration and connection is important to our culture. Work is performed onsite, minimum 4 days per week.

Lead Architect- Data & AI Cyber Security

Amazon Web Services

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
Amazon Web Services (AWS) is seeking an exceptional Principal Security Solutions Architect to join our AWS Industries Security Specialist SA team. This role sits at the intersection of deep technical security expertise, emerging AI security challenges, and strategic customer transformation. You will serve as a trusted security advisor to some of the largest and most complex global enterprise customers at AWS across Healthcare &amp; Life Sciences, Automotive &amp; Manufacturing, Energy, Telecommunications, Retail, and Media &amp; Entertainment industries, helping them accelerate innovation and unblock cloud adoption through strategic security and compliance solutions. 
As a Principal Security SA, you will work backwards from customer success to transform security from a perceived barrier into a strong business enabler. You will lead transformational security initiatives that impact entire industries, establish thought leadership in emerging security domains, and influence AWS service roadmaps based on enterprise customer requirements. Your work will demonstrably accelerate time-to-market, increase customer trust, and enable competitive advantages through security excellence. 
 
AWS values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the 8 description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 
 
Why AWS? 
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. 
 
Inclusive Team Culture 
Here at AWS, it&rsquo;s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. 
 
Mentorship &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.
 
AWS Sales, Marketing, and Global Services (SMGS) is responsible for driving revenue, adoption, and growth from the largest and fastest growing small- and mid-market accounts to enterprise-level customers including public sector. The AWS Global Support team interacts with leading companies and believes that world-class support is critical to customer success. AWS Support also partners with a global list of customers that are building mission-critical applications on top of AWS services. 
The AWS Industries team is committed to helping industry customers enable their digital transformation journeys. Our primary goal is to meet customers where they are in their cloud journey and work backwards from their industry specific needs to transform their business and their entire industry. Our team speaks the language of our industry customers, which means that we focus on business outcomes and industry use cases on behalf of our customers, whether that is how we build products and solutions, how we sell, how we deliver, or how we partner. 
 
Key job responsibilities 
Strategic Customer Engagement &amp; Security as a Business Enabler: 
 
<ul><li>Lead strategic security, risk, and compliance conversations with C-level executives (CISOs, CIOs, CTOs, CEOs) at large multinational enterprises, helping them see security as a catalyst for faster innovation and competitive advantage</li><li>Build and own relationships with senior security decision-makers, managing complex stakeholder environments across technical, legal, compliance, and business teams to drive consensus and outcomes</li></ul>
- Develop and apply deep expertise across six critical security domains: Identity &amp; Access Management, Threat Detection &amp; Incident Response, Data Protection &amp; Privacy, Network &amp; Infrastructure Security, Compliance &amp; Governance, and Application &amp; Workload Security - mastering both AWS native services and how leading third-party security solutions integrate to deliver comprehensive outcomes 
<ul><li>Architect and deliver highly complex, 400+ level technical security solutions for the most demanding enterprise environments, solving problems where standard patterns simply aren't enough</li><li>Lead transformational, industry-scale security initiatives. These include ambitious, multi-month efforts that remove adoption barriers for entire customer segments, not just individual accounts</li><li>Bring deep expertise in AI and Agentic AI security, helping customers securely adopt generative AI and autonomous agent systems</li><li>Create thought leadership content, enable and scale through the broader field organization, and amplify customer feedback to directly influence AWS service roadmaps</li></ul> 
A day in the life 
No two days look exactly the same, but here's a sense of what this role feels like in practice. 
 
You might start your morning reviewing a complex security architecture proposal for a global automotive manufacturer trying to meet EU cybersecurity regulations while migrating to cloud - and by afternoon, you're on a call with a healthcare company's CISO walking through how AWS native controls, combined with their existing identity governance platform, can actually accelerate their compliance timeline rather than extend it. 
 
Mid-week, you might be deep in research mode, working on a new framework for securing agentic AI systems that you're planning to publish and present at an upcoming industry conference. You're not just solving one customer's problem; you're building something that millions of customers across all industries can use. 
 
You'll regularly field complex technical questions from field architects who are stuck on a customer challenge where your guidance helps them move forward without needing to escalate. You'll also spend time in conversations with AWS service teams, sharing what you're hearing from customers and pushing for roadmap changes that would remove real adoption blockers and enable exciting new capabilities. 
 
Some weeks you're traveling to meet a customer in person. Others you're writing, building, or presenting from your desk. The common thread: you're always working backwards from what customers actually need to succeed and you're always thinking about how to make that success repeatable at scale. 
 
About the team 
Our team brings together deep technical security expertise and real industry experience to drive transformation at scale - not just for individual customers, but across entire industries. We're opinionated advisors who prescribe solutions, embrace ambiguity, and challenge the status quo. We invest in long-term relationships at every level of our customers' organizations, prioritizing trust over transactions. We actively shape AWS service evolution based on what we see at the frontier of enterprise security. And we build community by scaling ourselves and elevating skills across the organization so that every customer interaction moves the industry forward. The team serves global customers, and is comprised of builders across Europe and North America.</div><h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>12+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data &amp; analytics) experience</li><li>Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>Experience developing technology solutions and evangelising end-to-end technology roadmaps that guide IT transformations toward cloud computing</li><li>Experience communicating across technical and non-technical audiences and at C-level, including training, workshops, publications</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Knowledge of distributed systems design and implementation or equivalent</li><li>Knowledge of large scale automation and workflow management or equivalent</li><li>Knowledge of database design and implementation or equivalent</li><li>Knowledge of presentations and whiteboarding skills with a high degree of comfort speaking with internal and external executives, IT management, and developers</li><li>Experience architecting, migrating, transforming or modernizing customer requirements to the cloud</li><li>CISSP-ISSAP (Certified Information Systems Security Professional-Information Systems Security Architecture Professional) or CISSP-ISSEP (Certified Information Systems Security Professional-Information Systems Security Engineering Professional)</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, MA, Boston - 182,800.00 - 247,300.00 USD annually 
USA, TX, Dallas - 182,800.00 - 247,300.00 USD annually 
USA, WA, Seattle - 182,800.00 - 247,300.00 USD annually</div>

Principal Security Specialist Solutions Architect, AWS Industries

Elyon International

<div>Objective 
 
Engineer and standardize reusable security patterns for Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). This role provides approved patterns for services, allowing application teams to utilize pre-approved service and API patterns without requiring them to threat model cloud services when developing application threat models. 
 
Primary Responsibilities
<ul><li>Backlog Execution: Conduct deep-dive threat model reviews for an immediate backlog of 22 cloud services.
</li><li>Pattern Engineering: Develop modular, &quot;Lego-brick&quot; threat models for cloud services and API patterns, defining mandatory security controls and standardized use cases.
</li><li>Stakeholder Defense: Schedule threat model reviews (TMRs) for cloud services. Present and defend service threat models in formal threat model reviews (TMRs) with the Boeing Enterprise Security (BES) to defend and secure approval for standardized patterns.
</li><li>Additional Reviews: For services that require changes to environment perimeters, coordinate with landing zone architects to update landing zone architecture standards, schedule reviews, and review changes with the Secure Perimeter Review Board (SPRB) reviews.
</li><li>Technical Research: Perform manual analysis using TrustOnCloud research libraries to identify Cloud Service Provider (CSP) specific threats and configuration requirements. Work with CSP subject matter experts to develop service threat models when necessary. 
</li></ul> 
 
Secondary Responsibilities
<ul><li>Library Stewardship: Manage repository of approximately 200 service and API threat models.
</li><li>Governance &amp; Maintenance: Execute a manual biennial (2-year) refresh cycle for all models in the library to ensure continued alignment with CSP updates and feature releases. 
</li></ul> 
 
Key Performance Indicators (KPIs)
<ul><li>Throughput: Following a 1-month ramp-up and shadowing/training period, complete a minimum of 3 service threat model reviews per month.
</li><li>Backlog Resolution: Clear the initial 22-service backlog within approximately 8 months of the completion of the training period.
</li><li>Maintenance Compliance: Maintain 100% adherence to the biennial manual refresh schedule for the 200-pattern library. 
</li></ul> 
 
Required Qualifications
<ul><li>Experience: 5+ years in cloud security architecture or threat modeling.
</li><li>Technical Depth: Expert knowledge of AWS, Azure, and GCP managed services and the Shared Responsibility Model.
</li><li>Analytical Skill: Proven ability to synthesize complex technical data (e.g., TrustOnCloud reports) into concise, executable security standards.
</li><li>Communication: Ability to negotiate and defend technical security positions to central risk and compliance stakeholders. 
</li></ul> 
 
Preferred Experience
<ul><li>Direct experience using TrustOnCloud for threat research.
</li>Background in creating reusable security patterns in large-scale enterprise environments. 
<li>
</li></ul> 
Only shortlisted candidates are going to be contacted 
 
 
Benefits:
 
 
Paid sick leave, Medical/Dental (optional), 401 (k) Retirement Plan (optional), Employer Paid Life Insurance, Employer Paid Short Term Disability, Optional Life Insurance. 
 
 
 
ELYON International, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.</div>

Cloud Security Threat Modeler (Service & API Patterns)

Oracle

<div>About the role 
 
You will design security and compliance reference architectures, standards, and controls for Oracle Cloud services and platforms, with a focus on continuous compliance and audit-ready engineering. This role is a hybrid of compliance engineering (building automation, evidence pipelines, compliance-as-code) and security GRC architecture (control design, framework mapping, risk decisions, and governance at scale).
 
 
You will lead high-impact design reviews, control and evidence strategy, and requirements-to-implementation translation across cloud primitives (compute, network, storage), identity and access, container/Kubernetes platforms, AI/ML systems, and developer platforms. You will collaborate with senior leaders and product teams, mentor engineers, and influence roadmaps through clear writing, principled prioritization, and metrics&mdash;while directly authoring and owning OSCAL artifacts and scaling through others.
 
Ideal candidates bring deep experience &ldquo;building clouds&rdquo; or securing large-scale distributed systems; strong fluency in global compliance regimes (including but not limited to NIST-800 series, SOC 2, ISO 27001, ISO 42001, PCI, FedRAMP, GDPR, and other international/regional frameworks); and a track record of delivering automation-first compliance outcomes (e.g., continuous control validation, evidence automation, and measurable reduction in audit preparation effort).
 
You are hands-on, inclusive, and customer-obsessed, balancing rigor with velocity.
 
 
About the business 
 
Oracle&rsquo;s Governance, Risk &amp; Compliance (GRC) organization enables secure, compliant cloud delivery by partnering deeply with engineering and operations. We standardize control outcomes, strengthen evidence quality, and operationalize compliance through scalable patterns, automation, and measurable risk reduction&mdash;helping Oracle meet customer, regulatory, and industry expectations. 
 
What you'll do
<ul><li>Set strategy: Define multi-year GRC and compliance engineering strategy and roadmaps for continuous compliance, control automation, evidence pipelines, and audit readiness across Oracle products and services&mdash;focused on reducing manual audit toil through automation and standardization.
</li><li>Authoritative design: Publish security/compliance reference architectures, control baselines, evidence standards, and implementation patterns; lead cross-org reviews that raise the bar on auditability and continuous assurance.
</li><li>Build compliance into the cloud: Partner with core service teams (compute, networking, storage, virtualization, container/orchestration, service mesh) to drive secure-by-default and compliant-by-default designs, with controls that are measurable and operationally sustainable.
</li>Frameworks<li> controls: Translate regulatory and customer requirements into engineering-ready controls, acceptance criteria, and implementation guidance across regimes including (but not limited to) NIST-800, SOC 2, ISO 27001, ISO 42001, PCI, FedRAMP, GDPR, and regional frameworks&mdash;ensuring mappings are rationalized and scalable across multiple regimes.
 
OSCAL ownership: Directly write, curate, and own OSCAL artifacts (e.g., catalogs/profiles/component definitions and related content as applicable), and establish scalable operating models (templates, review workflows, QA checks) so teams can contribute and maintain artifacts over time.
</li><li>Compliance-as-code: Drive adoption of policy-as-code and compliance-as-code approaches (automated control validation, CI/CD gates, drift detection, and standardized attestations) to reduce manual audit effort and improve consistency.
</li><li>Evidence engineering: Design and standardize evidence collection pipelines with lineage, traceability, retention, and quality controls; ensure evidence is high-signal, reproducible, and mapped to controls and system boundaries&mdash;prioritizing automation, normalization, and audit-ready reporting.
</li><li>Continuous monitoring &amp; remediation: Design scalable mechanisms to continuously detect control drift and drive remediation (automated and/or workflow-driven), with clear metrics and accountability for sustained compliance outcomes.
</li><li>Risk, compliance, and safety: Partner with privacy, legal, and security stakeholders to incorporate privacy-by-design and AI governance needs (e.g., ISO 42001) into engineering controls and evidence strategies&mdash;especially for AI-enabled applications and services.
</li><li>Incident leadership (compliance perspective): Ensure compliance controls remain resilient through incidents and major changes; drive post-incident reviews and systemic improvements to guardrails and evidence quality.
</li><li>Influence at scale: Produce clear design docs and executive narratives; mentor engineers and program leaders; build communities of practice and reusable assets for continuous compliance.</li></ul></div>
 <div>What you'll bring
<ul><li>12+ years in security architecture/engineering, compliance engineering, or GRC technical leadership for large-scale distributed systems; significant experience &ldquo;building clouds&rdquo; (IaaS/PaaS) or platform engineering
</li><li>Deep expertise in security/compliance frameworks and audit expectations, including several of: NIST-800 series (e.g., NIST 800-53), SOC 2, ISO 27001, ISO 42001, PCI, FedRAMP, GDPR, and international/regional frameworks (ability to map and rationalize across regimes)
</li><li>Demonstrated ability to translate requirements into engineering-ready controls, define control intent and testability, and drive implementation across multiple teams with measurable outcomes
</li><li>Demonstrated experience building continuous compliance automation programs/platforms (e.g., control-to-requirement mappings, automated evidence collection, continuous monitoring) that materially reduce audit prep effort and builder toil
</li><li>Hands-on OSCAL proficiency: capable of authoring and owning OSCAL artifacts directly, and creating scalable contribution models (templates, review workflows, QA checks, governance).
</li><li>Strong experience with compliance-as-code / policy-as-code, automated control validation, CI/CD integration, configuration baselines, and continuous monitoring
</li><li>Hands-on depth with one or more: OCI, AWS, Azure, GCP; Kubernetes; Terraform/Policy-as-Code; CI/CD; Linux hardening; observability stacks (enough to design/validate controls and evidence feasibility)
</li><li>Demonstrated ability to lead cross-org initiatives, influence without authority, and deliver compliant-by-default solutions at scale&mdash;including leading through engineering managers/TPMs and partnering effectively with audit/assessors when needed
</li><li>Strong written and verbal communication; ability to produce clear design docs, control narratives, evidence strategies, and executive-level updates
</li>Commitment to inclusive collaboration and mentoring 
<li>
</li></ul> 
Preferred Qualifications:
<ul><li>Experience designing and operating evidence pipelines and assurance platforms (control testing automation, evidence normalization, lineage, retention, dashboards, and audit-ready reporting)
</li><li>Experience building or operating large-scale detection and remediation pipelines that continuously reduce misconfigurations/control drift across large environments
</li><li>Experience partnering with assessors/auditors and driving remediation programs across large engineering organizations
</li><li>Familiarity with secure SDLC controls and software supply chain assurance (SBOMs, signing, provenance, deployment gates), especially where they support compliance outcomes
 
Experience defining security/compliance specifications for AI-enabled applications and embedding them into SDLC workflows (aligned to AI governance expectations such as ISO 42001)
</li>Advanced degree in Computer Science, Engineering, or related field (or equivalent experience) 
<li>
</li></ul> 
Leadership competencies
<ul><li>Performance, drive, and execution
</li><li>You&rsquo;ll deliver value and shape a performance-driven culture while ensuring accountability and communicating expectations
 
Collaboration
</li><li>You understand and promote the value of collaboration and inclusivity and can align strategic aims with organizational goals
 
Communicating for impact
</li><li>You inspire confidence by championing a clear understanding and support of organizational strategy and objectives
 
Inspirational leadership
</li><li>You build a reputation for strategy by inspiring and empowering others while showing leadership internally and externally
 
Competitive edge
</li><li>You anticipate changes in customer needs and seize opportunities to build value, encourage innovation, and meet objectives</li></ul></div>

Security Architect

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
AWS Professional Services is revolutionizing how we create value for customers. As Senior Consultant, Agentic Delivery Acceleration, you'll pioneer the transformation of how we sell and deliver engagements by leveraging AI to accelerate adoption, reduce risk, and enhance experiences. 
 
Within AWS Professional Services, you will own the design and development of intuitive user interfaces and workflow automation solutions that power seamless experiences for agentic AI products. You will play a critical role in translating complex business processes into elegant, scalable automation &mdash; enabling teams across Professional Services to work smarter and faster through the power of agentic AI. 
 
If you're passionate about leveraging AI to solve complex sales and delivery challenges and ready to drive meaningful innovation in one of the world's most customer-obsessed organizations, this role offers an exceptional opportunity for transformative impact. 
 
Key job responsibilities 
<ul><li>Design, build, and maintain intuitive user interfaces that support agentic AI solutions, ensuring a seamless and consistent end-user experience across workflows</li><li>Architect and implement workflow automation solutions within Amazon Quick Suite, streamlining and automating complex business processes at scale</li><li>Partner with product managers, engineers, and business stakeholders to translate requirements into robust, scalable technical solutions</li><li>Identify opportunities to reduce manual effort and increase operational efficiency through intelligent automation and process re-engineering</li><li>Collaboratively establish and enforce UI/UX standards, design patterns, and development best practices across the team</li><li>Produce clear technical documentation, runbooks, and onboarding materials to support adoption and scalability</li></ul> 
About the team 
ABOUT AWS: 
 
Diverse Experiences 
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Why AWS 
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.
 
 
Inclusive Team Culture 
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. 
 
Mentorship and Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
 
 
AWS Professional Services helps enterprise customers realize their desired business outcomes when using AWS. Our team provides expertise in cloud architecture, migration, application development, security, and operations to accelerate customers' cloud transformation journey. We are looking for individuals who are passionate about innovation, continuous improvement, and delivering exceptional customer experiences.</div><h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>2+ years of leading multiple Agile teams (like Scrum Masters, Product Owners) concurrently or at scale experience</li><li>7+ years of leading and delivering enterprise-level IT engagements experience</li><li>5+ years of cloud computing experience</li><li>Bachelor's degree in STEM field</li><li>Knowledge of the value proposition of the public cloud and cloud engagement delivery (IaaS, PaaS, SaaS)</li><li>Experience in leading multiple Agile teams (like Scrum Masters, Product Owners) concurrently or at scale</li><li>Experience in leading and delivering enterprise-level IT engagements</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>5+ years of delivering customer engagements in a professional services role experience</li><li>active project management certification (e.g., APM, CSM, PMI-ACP, PRINCE2)</li><li>AWS certification</li><li>Experience in delivering customer engagements in a professional services role</li><li>Experience with Agile and project management toolsets like Jira, Rally, VersionOne or Taiga</li><li>Experience working with and presenting to C-level executives, IT, and lines of businesses across organizations or equivalent</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, IL, Chicago - 153,600.00 - 207,700.00 USD annually 
USA, NY, New York - 168,900.00 - 228,500.00 USD annually 
USA, TX, Dallas - 153,600.00 - 207,700.00 USD annually 
USA, VA, Arlington - 153,600.00 - 207,700.00 USD annually 
USA, WA, Seattle - 153,600.00 - 207,700.00 USD annually</div>

Senior Engagement Manager, AWS Professional Services

Deloitte

<div>Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. 
 
Recruiting for this role ends on 5/30/26 
 
Work you'll do 
 
As a Microsoft 365 Security Senior Consultant, you will be at the front lines with our clients supporting them with their Cloud Cyber Risk needs specifically helping them navigate the journey on securing their Microsoft 365 (M365) platform. This will include: 
<ul><li>
Function as senior onshore engineer/consultant for the following Microsoft technologies: Purview, Intune, Sentinel, Security Copilot, Entra ID, Defender for Office, Defender for Endpoints and Servers, Defender for Vulnerabilities, Defender for Cloud Apps, Defender XDR and SCCM</li><li>
Conduct cloud security analysis, recommendations and configurations of prospective clients' Microsoft Entra ID, Office 365 (O365), Exchange Online, Teams, OneDrive for Business, and SharePoint Online environments based on Deloitte's Microsoft 365 Cyber Risk Framework. This can include Microsoft's cloud solutions such as Entra, Purview, Defender, Intune, and Sentinel.</li><li>
Perform technical health checks for these M365 platforms/environments prior to broader deployments.</li><li>
Support proof of concept and production deployments of these cloud technologies.</li><li>
Assist clients with transitions to the Microsoft 365 security services such as solution setup and service configuration, focused on risk mitigation. Additional technologies include MFA, Conditional Access, Purview Compliance Manager, M365 Defender, Defender for O365, Defender for Cloud Apps (MDCA), Purview Information Protection (MPIP), Purview Data Loss Prevention (DLP).</li><li>
Assist clients with configuration and delivery of cloud security and compliance reports.</li><li>
Provide technical support for M365 E5 security services and resolve service-related issues through research and troubleshooting and working with Microsoft.</li><li>
Implement industry leading practices around M365 E5 cyber risks and cloud security for clients.</li><li>
Design and develop cloud-specific security policies, standards and procedures e.g., O365 tenant management and configuration, identify management and access control, auditing and monitoring, security incident and event management, data protection (classification/labeling, DLP, encryption), user and administrator account management, SSO, conditional access controls and password/key management.</li><li>
Troubleshoot system level problems in a multi-vendor, multi-protocol network environment.</li><li>
Document platform technical issues, analysis, client communication, and resolution as part of cyber risk mitigation steps.</li><li>
Execute on M365 security engagements during different phases of the lifecycle - Discover, Assess, Design, Deploy/Test, Hypercare/Handover.</li><li>
Implement industry leading practices around M365 cyber risks and cloud security for clients.</li><li>
Provide internal technical training to personnel as needed.</li><li>
Acting as a subject matter expert on cloud cyber risk for Microsoft Purview, Microsoft Intune, Microsoft Defender, and Microsoft Sentinel capabilities.</li><li>
Contribute to Point-of-Views (PoVs) on providing leading practices to our clients on the M365 security challenges they face.</li></ul> 

The team you'll join 
 
Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products. 
 
Required: 
<ul><li>
Working experience in at least two of the areas listed below.</li><li>
4+ years of experience in technical consulting, client problem solving, architecting and designing solutions in a consulting role</li><li>
4+ years of hands-on technical experience with Microsoft 365 enterprise-level messaging and collaboration services (Teams, OneDrive for Business, Exchange Online, Entra ID, SharePoint Online, O365 administration and setup) in implementation and operations.</li><li>
4+ years of hands-on technical experience with enterprise-level systems management systems such as SCCM and Intune and endpoint engineering (MEM) and mobile device management (MAM &amp; MDM)) implementation or operations.</li><li>
4+ years of hands-on technical and project / professional experience enterprise-with at least two of the following technologies: Microsoft Endpoint Security Platforms (e.g. Defender for Endpoints and Defender for Servers), Microsoft Sentinel, Microsoft's email security platform (Defender for Office), Microsoft Purview &amp; Entra ID</li><li>
Ability to travel 50%, on average, within North America, based on the work you do and the clients and industries/sectors you serve.</li><li>
Limited immigration sponsorship may be available.</li></ul> 
Ideally the following technical experience is a plus in any of the technologies below: 
<ul><li>
Microsoft Security Copilot</li><li>
Defender for Vulnerabilities</li><li>
Defender for Cloud Apps</li><li>
Defender XDR</li><li>
SCCM</li></ul> 

Preferred: 
<ul><li>
Microsoft Certifications such as: (SC-900, SC-100, SC-200, SC-300, SC-400),</li><li>
Cyber Certifications such as: CCSP, CCSK, CISSP, CCNP, and CCNA.</li><li>
BA/BS Degree preferred. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.</li></ul> 
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 - $218,600 
 
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. 
 
Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html</div>

Microsoft 365 Security Senior Consultant

Explore 128+ Cloud security architect in Seattle this March. Find roles across top companies and apply now to boost your career.