cloud security architect

General Dynamics Information Technology

<div></div><div><div><div>Clearance Level
<div>None</div>
</div><div></div><div>Category
<div>Cyber and IT Risk Management</div>
</div><div></div><div>Location
<div>Remote, Working from the USA</div>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Cloud Native Security</p>
</div><div><p>DevSecOps</p>
</div><div><p>Security Platforms</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ225313</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>MBI (T2)</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Pipeline</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to work alongside federal civilian agencies. Make an impact by providing services that help the government ensure the well being and support of U.S. citizens.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p><b>Advance your career while impacting our national security as a Senior Cloud Security Architect. </b>Here, technologists have many paths to grow a meaningful career supporting cyber missions and operations across the federal government.</p>
<p></p><p><b>MEANINGFUL WORK AND PERSONAL IMPACT</b></p>
<p>This position will support the United States Postal Service (USPS) as a Senior Cloud Security Architect. As a Senior Cloud Security Architect, you will lead the strategic vision for protecting our multi-cloud ecosystem. You are responsible for designing the security blueprints that govern our entire digital footprint&mdash;from identity perimeters to AI-driven threat detection. This role requires a &quot;Security as Code&quot; mindset, where you build automated guardrails that empower developers to move at speed without compromising the safety of our data or infrastructure.</p>
<p><b>Key Responsibilities</b></p>
<ul><li><b>Security Architecture Vision:</b> Lead the design of a global Zero Trust architecture, ensuring robust identity governance (IAM), network micro-segmentation, and data encryption across AWS, Azure, or GCP.</li>
<li><b>AI-Native Security Strategy</b>: Architect specialized security frameworks for AI/ML pipelines, focusing on data privacy for training sets, model integrity, and securing LLM-integrated applications against emerging attack vectors.</li>
<li><b>Automated Guardrails (Policy as Code):</b> Develop and enforce enterprise-wide security policies using Terraform, etc., ensuring that non-compliant infrastructure is automatically remediated or blocked from deployment.</li>
<li><b>Cloud Posture Management:</b> Design and oversee the integration of CNAPP and CSPM tools to provide real-time visibility into misconfigurations, vulnerabilities, and excessive permissions.</li>
<li><b>Threat Modeling &amp; Resilience:</b> Conduct deep-dive threat modeling for complex cloud-native systems, simulating advanced persistent threats (APTs) and &quot;blast radius&quot; scenarios to strengthen system resilience.</li>
<li><b>Security Consultancy:</b> Act as the lead security advisor for the Cloud Architecture team, bridging the gap between DevOps agility and rigorous regulatory compliance (SOC2).</li>
</ul><p></p><p><b>WHAT YOU&rsquo;LL NEED TO SUCCEED</b></p>
<p><b>Education:</b></p>
<ul><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or a related engineering field. Preferred but not required.</li>
<li><b>NOTE:</b> If resources do not have a relevant college degree, an additional 4 years of relevant work experience is required.</li>
</ul><p><b>Technical Qualifications</b></p>
<ul><li><b>Experience:</b> 12+ years in Cybersecurity, with at least 6 years focused on architecting secure cloud environments at scale.</li>
<li><b>Security Platforms:</b> Mastery of cloud-native security suites (e.g., AWS Security Hub, Azure Defender, GCP Security Command Center).</li>
<li><b>Identity &amp; Access: </b>Expert knowledge of Identity-First Security, including CIEM, Just-In-Time (JIT) access, and complex OIDC/SAML flows.</li>
<li><b>Automation: </b>Proficiency in Python, Go, or Bash to build custom security automations and integrate with SOAR platforms.</li>
<li><b>DevSecOps:</b> Deep experience embedding automated security testing (SAST/DAST/SCA) directly into CI/CD pipelines.</li>
<li><b>Cloud Networking:</b> Advanced understanding of secure connectivity, including SD-WAN, Cloud WAF, and Zero Trust Network Access (ZTNA).</li>
</ul><p><b>Preferred Experience</b></p>
<ul><li><b>Certifications:</b> Top-tier credentials.</li>
<li><b>Soft Skills:</b> Strong ability to bridge the gap between &quot;Speed of DevOps&quot; and &quot;Rigors of Security&quot; while communicating clearly with executive leadership</li>
<li><b>Leadership:</b> Proven ability to influence technical roadmaps and present security risks clearly to C-suite stakeholders.</li>
</ul><p><b>Core Objectives</b></p>
<ul><li><b>Zero Standing Privilege:</b> Help Transition the organization to a &quot;Zero Standing Privilege&quot; model for all production environments.</li>
<li><b>Automated Compliance:</b> Help Achieve automated auditing for core compliance frameworks (e.g., NIST, CIS Benchmarks).</li>
<li><b>Mean Time to Detect (MTTD):</b> Utilize AI-driven monitoring to reduce the detection time of anomalous cloud activity to minimum</li>
</ul><p><b>Security Clearance Level:</b></p>
<ul><li>This role will require you to obtain and maintain a <b>Public Trust</b> and will require you to provide onsite <b>fingerprinting</b> at a designated facility. This investigation may review personal and criminal behavior, financial conduct, foreign influence, as well as other adjudications.</li>
<li><b>This position has a U.S. residency requirement. The USPS security clearance process requires the selected candidate to have resided in the U.S. (including U.S. Territories) for the last five years as follows: U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 6 months consecutively in the last 3 years (unless they meet certain exceptions). Non-U.S. Citizens cannot have left the U.S. (including U.S. Territories) for longer than 90 days consecutively in the last 3 years.</b></li>
</ul><p><b>Location:</b></p>
<ul><li>Morrisville, NC</li>
<li>Falls Church, VA</li>
<li>Eagan, MNR</li>
<li>Remote</li>
</ul><p></p><p><b>GDIT IS YOUR PLACE:</b></p>
<ul><li>401K with company match</li>
<li>Comprehensive health and wellness packages</li>
<li>Internal mobility team dedicated to helping you own your career</li>
<li>Professional growth opportunities including paid education and certifications</li>
<li>Cutting-edge technology you can learn from</li>
<li>Rest and recharge with paid vacation and holidays</li>
</ul><p></p><p>#zxc726</p>
</div></div><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>10 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
</div><p></p><div>Travel Required
<p>Less than 10%</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $147,292 - $199,278. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

Senior Cloud Security Architect

INFRA ASSURE

<p><b>Position:</b> Network &amp; Security Architect<br/><b>Location:</b> Abu Dhabi, UAE<br/><b>Company:</b> Infra Assure<br/><b>Employment Type:</b> 3-Month Contract<br/><b>Salary:</b> Market Standards / Candidate expectation</p><p><b>Job Description</b></p><p>We are looking for an experienced <b>Network &amp; Security Architect</b> to join a customer engagement in Abu Dhabi for a 3-month contract. The ideal candidate will have strong enterprise network and cloud security architecture experience and be capable of leading technical discussions with customers, SMEs, and project stakeholders.</p><p><b>Key Responsibilities</b></p><ul><li>Lead network and security architecture workshops with customers and technical SMEs.</li><li>Design and recommend secure enterprise network and cloud security solutions.</li><li>Provide architecture guidance and best practices for large enterprise environments.</li><li>Review existing infrastructure and recommend security improvements.</li><li>Work closely with customer teams to develop secure, scalable, and resilient architectures.</li><li>Support solution design, implementation planning, and technical governance.</li><li>Ensure alignment with enterprise security standards and industry best practices.</li></ul><p><b>Required Skills</b></p><ul><li>Strong experience in <b>Network Security Architecture</b>.</li><li>Hands-on expertise with <b>Palo Alto Firewalls</b> and <b>Panorama</b>.</li><li>Experience with <b>Microsoft Azure Security</b>.</li><li>Experience with <b>Wiz</b> (Cloud Security Platform).</li><li>Experience with <b>AppOmni</b> for Oracle SaaS security.</li><li>Experience with <b>Tenable</b> (including vulnerability management, TPM/CIS-related security assessments).</li><li>Strong understanding of enterprise network security, firewalls, VPNs, IDS/IPS, and security best practices.</li><li>Excellent customer-facing, consulting, and communication skills.</li></ul><p><b>Preferred Experience</b></p><ul><li>10+ years of experience in Network and Information Security.</li><li>Experience working as a Security Architect, Network Security Architect, or Enterprise Security Consultant.</li><li>Experience designing and delivering enterprise security solutions in large environments.</li><li>Relevant certifications such as PCNSE, CISSP, CCSP, Azure Security, TOGAF, or equivalent are advantageous.</li></ul><p>Application Question(s):</p><ul><li>Where are you located if not Abu Dhabi ? </li><li>How soon can you join if selected ?</li></ul><p>Location:</p><ul><li>Abu Dhabi (Preferred)</li></ul><p>Work Location: In person</p>

Network and Security Engineer

CGS Federal (Contact Government Services)

<div>
 Cloud Systems Architect Chantilly, VA / Remote / Hybrid / Fairfax, VA Information Technology / Full Time Hybrid / Hybrid Cloud Systems Architect Employment Type: Full-Time, Mid-level Department: Information Technology We are seeking a Cloud Systems Architect with experience with cloud infrastructure to engineer and support public, private and hybrid clouds. The ideal candidate will be proficient in a variety of cloud hosts including Amazon Web Services and Microsoft Azure at a minimum.
 <br/>
 <br/>
 CGS brings motivated, highly skilled, and creative people together to solve the government&rsquo;s most dynamic problems with cutting-edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities. Skills and attributes for success:
 <br/>
 <br/>
 <ul>
  <li>
   The candidate will be knowledgeable of the most recent updates and developments and act as an advisor to our customer in reference to the cloud management strategies to be employed to take advantage of the benefits offered by cloud computing such as being able to function without any restrictions to the workload, initiate as many workstations as necessary per time period and pay only for what they actually use.
  </li>
  <li>
   The candidate will also work with the IT Security team to manage and maintain cloud systems security of the data and network resources.
  </li>
  <li>
   The candidate will also be responsible for engineering on customer premise applications and systems interconnected to cloud resources.
  </li>
  <li>
   Designs and defines system architecture for new or existing complex computer systems.
  </li>
  <li>
   Determines systems specifications, input/output processes, and working parameters for hardware/software compatibility and maintenance of system security.
  </li>
  <li>
   Coordinates design of subsystems and integration of total system. Identifies, analyzes, and resolves program support deficiencies.
  </li>
  <li>
   Develops and recommends corrective actions.
  </li>
  <li>
   May provide technical guidance for database administrators and software developers. Qualifications:
  </li>
  <li>
   Experience with and a complete understanding of the technology required for cloud computing.
  </li>
  <li>
   Experience with the skills to migrate applications to the cloud.
  </li>
  <li>
   Be able to build relationships between the customers and the team members.
  </li>
  <li>
   The ability and the knowledge to integrate services and tools to any and all areas to be used such as networks and data processing.
  </li>
  <li>
   The ability and the knowledge to implement security information and event management to keep the customer's assets safe.
  </li>
  <li>
   Experience with meeting or exceeding the requirements of cloud provider service-level agreements Experience with AWS and Azure.
  </li>
  <li>
   Knowledge of a multitude of programming languages including Python, PHP, Java, Node and Ruby on Rails.
  </li>
  <li>
   Typically a Bachelor's Degree and 6 years work experience or equivalent experience. Our Commitment: Contact Government Services (CGS) strives to simplify and enhance government bureaucracy through the optimization of human, technical, and financial resources. We combine cutting-edge technology with world-class personnel to deliver customized solutions that fit our client&rsquo;s specific needs. We are committed to solving the most challenging and dynamic problems. For the past seven years, we&rsquo;ve been growing our government-contracting portfolio, and along the way, we&rsquo;ve created valuable partnerships by demonstrating a commitment to honesty, professionalism, and quality work. Here at CGS we value honesty through hard work and self-awareness, professionalism in all we do, and to deliver the best quality to our consumers mending those relations for years to come. We care about our employees. Therefore, we offer a comprehensive benefits package.
  </li>
  <li>
   Health, Dental, and Vision
  </li>
  <li>
   Life Insurance
  </li>
  <li>
   401k
  </li>
  <li>
   Flexible Spending Account (Health, Dependent Care, and Commuter)
  </li>
  <li>
   Paid Time Off and Observance of State/Federal Holidays Contact Government Services, LLC is an Equal Opportunity Employer. Applicants will be considered without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. Join our team and become part of government innovation! Explore additional job opportunities with CGS on our Job Board: https://cgsfederal.com/join-our-team/ For more information about CGS please visit: https://www.cgsfederal.com or contact: Email:
   <br/>
   <br/>
  </li>
 </ul>
 #CJ $167,032.32 - $226,686.72 a year We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. apply for this job
</div>


Cloud Systems Architect with Security Clearance

<div></div><div><div><div>Clearance Level
<div>Top Secret</div>
</div><div></div><div>Category
<div>Cyber and IT Risk Management</div>
</div><div></div><div>Location
<div>Washington, District of Columbia</div>
<i>(</i><i>Hybrid Workplace</i><i>)</i>
</div><div>
</div></div><div><div>Key Skills For Success
</div><div><p>Building Architecture</p>
</div><div><p>Design</p>
</div><div><p>VMware</p>
</div></div><div></div><div><div><div><div><div><div>
</div></div></div><div><h5 class="jobSectionHeader"><b>REQ#:</b><b> </b><b>RQ223555</b></h5>
<h5 class="jobSectionHeader"><b>Public Trust:</b><b> </b><b>None</b></h5>
<h5 class="jobSectionHeader"><b>Requisition Type:</b><b> </b><b>Regular</b></h5>
<h5 class="jobSectionHeader"><b>Your Impact</b></h5>
<p>Own your opportunity to serve as a critical component of our nation&rsquo;s safety and security. Make an impact by using your expertise to protect our country from threats.</p>
<h2 class="jobSectionHeader"><b>Job Description</b></h2>
<div><p>The Sr. Cyber Security Architect will provide subject matter expertise across cloud security, identity architecture, Zero Trust, network segmentation, application/container security, and enterprise monitoring capabilities. This role requires adaptability, critical thinking, and leadership advisory skills as the position aims to fundamentally re-shape the client&rsquo;s cybersecurity posture. The position requires the ability to operate with substantial independence, as the architect will spearhead multi-disciplinary technical efforts, act as an advisor to executives, and ensure the modernization and evolution of the client&rsquo;s technology environment.</p>
<p></p><p>The Security Architect is also responsible for defining and implementing secure enterprise architectures, engineering complex cybersecurity solutions, and integrating federal security mandates across the agency's technology stack.</p>
<ul><li>Lead enterprise cybersecurity architecture efforts by designing and governing integrated architectures across identity, devices, networks, applications, and data within a Zero Trust model.</li>
<li>Develop secure architectures for hybrid on-prem/cloud environments, Microsoft 365, identity services, and container ecosystems.</li>
<li>Establish enterprise patterns, baselines, and engineering standards.</li>
<li>Ensure alignment with NIST SP 800 53, RMF, and OMB/CISA directives.</li>
<li>Lead major cybersecurity modernization initiatives including defining scope, technical objectives, dependencies, schedules, and measurable outcomes.</li>
<li>Implement security infrastructure upgrades; Provide secure architecture solutions for Virtual Desktop and Server Infrastructures</li>
<li>Coordinate engineering, cloud, network, application, and development teams to oversee threat modeling, secure API design, encryption, secrets management.</li>
<li>Manage architectural risk; conduct impact analyses; and enforce technical quality gates.</li>
<li>Leading Zero Trust-aligned enterprise architectures across identity, cloud, applications, and data AND establishing standards and baselines to ensure compliance with NIST, RMF, and federal directives.</li>
<li>Performing functional testing and validation of security products.</li>
<li>Designing and implementing secure file sharing and cross domain solutions.</li>
<li>Directing or participating in major cybersecurity modernization efforts (i.e. coordinating cross-functional teams, managing architectural risk, overseeing pilots and vendor integrations, and driving enterprise application security).</li>
<li>Advancing the security of enterprise applications and platforms by embedding secure designing practices; integrating automated security testing and software-composition analysis; and applying threat analysis, API security, and data protection strategies.</li>
<li>Advising senior leadership on strategy and enterprise risk; leading or participating in architecture boards and interagency councils or industry working groups; and representing the organization to internal and external stakeholders.</li>
</ul><p></p><p>WHAT YOU&rsquo;LL NEED TO SUCCEED</p>
<p>Bring your cyber expertise and drive for innovation to GDIT. The Cybersecurity Analyst Sr Principal must have:</p>
<ul><li>Education: Bachelors degree in a technical discipline</li>
<li>Experience: 10+ years of related experience</li>
<li>Desired Technical skills: Experience with various Operating Systems (Linux/Windows/MacOS), various scripting languages (Python/Perl/Shell, etc); SEIM technologies (IBM Qradar, Splunk, or Elastic); on-prem and cloud implementations, IDS/IPS solutions; VMWare (ESXi, VMware vCenter, VMware VSAN, VMware View)</li>
<li>Security clearance level: TS with SCI Eligibility</li>
<li>US citizenship required</li>
<li>Role requirements: Onsite presence required, with telework availability (approval required); limited CONUS travel.</li><br>
</ul><div><br>
GDIT IS YOUR PLACE
<br>
At GDIT, the mission is our purpose, and our people are at the center of everything we do.
<ul><li>Growth: AI-powered career tool that identifies career steps and learning opportunities
</li><li>Support: An internal mobility team focused on helping you achieve your career goals
</li><li>Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
</li><li>Community: Award-winning culture of innovation and a military-friendly workplace
</li></ul><br>
OWN YOUR OPPORTUNITY
<br>
Explore a career in cyber at GDIT and you&rsquo;ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.
</div></div></div><div><div><div><h3 class="jobSectionHeader"><b>Work Requirements</b></h3>
</div></div><div></div><div><div>Years of Experience
<p>10 + years of related experience</p>
<ul><li>may vary based on technical training, certification(s), <b><i>or</i></b> degree</li></ul>
</div><div></div><div>Certification
</div><p></p><div>Travel Required
<p>Less than 10%</p>
</div><div></div><div>Citizenship
<p>U.S. Citizenship Required</p>
</div></div></div></div><div><h3 class="jobSectionHeader"><b>Salary and Benefit Information</b></h3>
<p>The likely salary range for this position is $178,500 - $241,500. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.
</p>
<h3 class="jobSectionHeader"><b>Our Identity Verification Process</b></h3>
<p>As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.</p>
<h3 class="jobSectionHeader"><b>About Our Work</b></h3>
<div></div><p>We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.</p>
<p>Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</p>
<p><i>Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></p></div></div></div></div>

Sr. Cybersecurity Architect - Active Top Secret

Capgemini

<div><div><div><div><p>Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.</p>
<div><div><div><h2 class="jobSectionHeader"><b>Location</b></h2>
</div><div><p>This is a remote role based in Dallas, US.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>About The Job You're Considering</b></h2>
</div><div><p>The Cloud Network Security Architect is responsible for designing, implementing, and governing secure cloud network architectures across hybrid and multi‑cloud environments. This role ensures the confidentiality, integrity, and availability of enterprise systems by defining security‑by‑design network frameworks aligned with business, compliance, and risk management objectives.</p>
</div></div><div><div><h2 class="jobSectionHeader"><b>Your Role</b></h2>
</div><div><ul><li><b>Enterprise Zero Trust Network Architect :</b> Implement Zero Trust network architecture, including segmentation, least-privilege access, and consistent policy enforcement across users, workloads, and services in hybrid environments.</li>
<li><b>Network Security Design :</b> Design and validate secure on-prem and cloud networking patterns (VPC/VNet, subnets, routing, TGW/peering, ingress/egress) using cloud-native controls and enterprise platforms.</li>
<li><b>Cross-Functional Requirements &amp; Architecture Translation :</b> Partner with application/platform/infrastructure teams to capture connectivity and security requirements (ports/protocols, data flows, trust boundaries) and translate them into actionable security architectures.</li>
<li><b>Firewall &amp; Segmentation Strategy Owner :</b> Define and standardize firewall policies and segmentation models, providing clear guidance on use of Palo Alto/Prisma vs. cloud-native mechanisms (SG/NSG, NACLs, route controls).</li>
<li><b>Architecture Governance &amp; Adoption :</b> Lead design reviews, threat modeling, and exception handling; produce and maintain standards, reference designs, and architecture decision records to drive secure-by-design outcomes.</li>
<li><b>Operational Enablement &amp; Continuous Improvement :</b> Collaborate with perimeter defense/SecOps to streamline rule discovery, risk review, approvals, and deployments (including automation); support troubleshooting and optimization for performance and resiliency.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Your Skills And Experience</b></h2>
</div><div><ul><li>10+ years of experience in network and security architecture, with strong focus on cloud platforms.</li>
<li>Deep expertise in cloud networking concepts: routing, DNS, load balancing, NAT, private connectivity, and network segmentation.</li>
<li>Hands‑on experience securing AWS and/or Azure networking services (VPC/VNet, Gateway, Firewall, Private Link, NSGs, Route Tables).</li>
<li>Strong understanding of network security technologies: firewalls, WAF, IDS/IPS, DDoS, proxy, and micro‑segmentation.</li>
<li>Experience implementing zero‑trust and identity‑centric network access models.</li>
<li>Proficiency with Infrastructure as Code and automation tools (Terraform, Ansible, CloudFormation).</li>
<li>Solid understanding of TCP/IP, BGP, IPSec, TLS, and network encryption mechanisms.</li>
<li>Experience working in regulated and compliance‑driven environments.</li>
</ul><p><b>Preferred Qualifications</b></p>
<ul><li>Cloud certifications (AWS Certified Security &ndash; Specialty, Azure Security Engineer, CCSP).</li>
<li>Experience with multi‑cloud or large‑scale cloud migration programs.</li>
<li>Knowledge of SASE, CASB, and secure access service edge architectures.</li>
<li>Familiarity with SIEM/SOAR and security monitoring integrations.</li>
<li>Experience supporting DevSecOps and CI/CD security integration.</li>
</ul></div></div></div><p>The base compensation range for this role in the posted location is: <b>$82,280-176,055.</b></p>
<p>Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.</p>
<p>The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.</p>
<p>These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.</p>
<p>It is not typical for candidates to be hired at or near the top of the posted compensation range.</p>
<p>In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.</p>
<p><b>Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees.</b> In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:</p>
<ul><li>Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave</li>
</ul><ul><li>Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)</li>
<li>Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)</li>
<li>Life and disability insurance</li>
<li>Employee assistance programs</li>
<li>Other benefits as provided by local policy and eligibility</li>
</ul><p><b>Important Notice:</b> Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini&rsquo;s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.</p>
<p><b>Disclaimers</b></p>
<p>Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.</p>
<p>This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.</p>
<p>Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.</p>
<p></p>
<p>Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.</p></div></div></div></div>

Network Security Lead

Adree

<div><p>Adree is seeking a <b>DevSecOps, Architect</b> to support our product development by leveraging technical and analytical expertise to articulate the value of secure, scalable digital solutions. In this role, you will work closely with stakeholders to understand business goals and technical requirements, and clearly demonstrate how target-state DevSecOps architecture and golden path standards can address their needs.</p><p>
You will be responsible for bridging the gap between secure supply chain infrastructure and seamless delivery execution, collaborating across teams to craft exceptional enterprise platforms. By blending infrastructure-as-code, GitOps workflows, automated security gates, and container orchestration, you will ensure our digital products are both highly resilient and fully auditable.</p><p></p>
Key Roles and Responsibilities<ul><li>
Engage with clients and stakeholders to gather requirements and understand their digital product goals.
</li><li>Deliver impactful presentations, reference architectures, and documentation showcasing CI/CD pipelines, artifact lifecycles, and environment strategies.
</li><li>Support the product and engineering teams in developing secure, high-availability Kubernetes and OpenShift clusters across private cloud environments.
</li><li>Provide technical insights and DevSecOps expertise throughout the product lifecycle to drive pipeline patterns, Fortify gates, SBOM/SCA expectations, and Sigstore signing.
</li><li>Collaborate with cross-functional teams (including security, testing, and product managers) to foster a DevOps culture and capture feedback to improve infrastructure offerings.
</li><li>Stay current with industry trends, market changes, IaC standards using Terraform, and configuration standards via Ansible to position solutions effectively.
</li><li>Conduct workshops, architectural reviews, and technical discussions internally and with clients to lead adoption waves and deprecate non-compliant delivery paths.
</li><li>Participate in Agile development processes and team alignments, providing technical mentorship to engineers and ensuring smooth integrations with third parties.</li></ul><br>
<b>
Requirements</b><br>
<br>
Education<ul><li>
Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related field.
</li></ul>Experience<ul><li>
10&ndash;15+ years of overall IT experience, with at least 5+ years dedicated to platform engineering or DevSecOps architecture.
</li><li>Proven track record designing enterprise GitOps models using Argo CD into OpenShift or Kubernetes, including multi-environment promotion.
</li><li>Demonstrated experience working within government, heavily regulated, or complex enterprise sectors is highly preferred.
</li></ul>Skills &amp; Competencies (Technical &amp; Analytical + Soft)<ul><li>
Deep proficiency in enterprise DevSecOps platform design, secure supply chain management, and policy-as-code concepts.
</li><li>Strong hands-on architectural knowledge of Azure DevOps Server, JFrog Artifactory, HashiCorp Vault, Terraform, and Ansible.
</li><li>Expert command over automated testing integrations (e.g., OpenText Service Virtualization, UFT One, UFT Digital Lab, LoadRunner).
</li><li>Analytical skills to design monitoring and operational readiness architectures aligned with AppDynamics, BMC, and Azure Monitoring.
</li><li>Strategic thinking, adoption leadership, and outstanding documentation skills to drive stakeholder alignment and pragmatic architectural trade-offs.
</li></ul>Experience (summary)<ul><li>
Target-state DevSecOps reference architecture and golden path design.
</li><li>Multi-environment GitOps deployment modeling using Argo CD into K8s/OpenShift.
</li><li>End-to-end secure software supply chain implementation (Fortify, Sigstore, Vault).
</li><li>Automated testing gate integration and virtualization orchestration.
</li><li>Infrastructure-as-Code (IaC) and configuration management standardization.
</li><li>Enterprise observability and monitoring architecture deployment.
</li></ul>Skills &amp; Competencies (summary)<ul><li>
Azure DevOps Server &amp; JFrog Artifactory ecosystem.
</li><li>Container orchestration (Kubernetes &amp; Red Hat OpenShift architecture).
</li><li>Infrastructure-as-Code (Terraform &amp; Ansible automation).
</li><li>Application security automation (SCA, SBOM, code signing).
</li><li>Enterprise monitoring (AppDynamics / BMC / Azure Monitoring).
</li><li>Stakeholder relationship management &amp; governance alignment.
</li><li>Prioritization and adoption leadership.
</li><li>Travel for client-facing activities.
</li></ul><p></p><p><b>Job Location: </b>HQ</p></div><p></p>

DevSecOps, Architect

Chamberlain Group

<div><p>Chamberlain Group (CG) is a global leader in intelligent access and Blackstone portfolio company. Powered by our myQ technology, we make access simple and secure for millions of homeowners, businesses, and communities worldwide. Our flagship brands, LiftMaster&reg; and Chamberlain&reg; , are found in 51+ million homes, and 14 million+ people rely on the myQ&reg; app daily.</p>
<p>
The Cloud Security Senior Engineer is responsible for designing, implementing, and maintaining security controls across AWS and Azure cloud environments. The ideal candidate brings deep hands-on experience securing multi-cloud environments in fast-paced, transformation-driven organizations with the ability to work directly with highly technical teammates.Architect and enforce cloud security controls across AWS and Azure, including IAM policies, network segmentation, encryption, and logging configurations.</p><ul><li><p>
Manage and optimize cloud security posture management (CSPM) and cloud workload protection (CWPP) tooling</p></li><li><p>
Conduct cloud security assessments, identify misconfigurations, and drive remediation with engineering teams.</p></li><li><p>
Design and implement guardrails for Infrastructure-as-Code (IaC) pipelines (Terraform, CloudFormation, Bicep) to prevent insecure deployments</p></li><li><p>
Monitor and respond to cloud-specific threats, integrating cloud telemetry into SIEM and detection workflows</p></li><li><p>
Evaluate and harden container and serverless architectures (EKS, ECS, Lambda, AKS, Azure Functions).</p></li><li><p>
Develop and maintain cloud security standards, reference architectures, and runbooks.</p></li><li><p>
Support incident response activities for cloud-based security events.</p></li><li><p>
Partner with Engineering, and Application Development teams to embed security into CI/CD pipelines.</p></li><li><p>
Provide technical input on cloud security tooling decisions, vendor evaluations, and proof-of-concept testing</p></li><li><p>
Stay current on cloud provider security features, emerging threats, and evolving compliance requirements (SOC 2, ISO 27001, NIST CSF, PCI DSS as applicable).</p></li><li><p>
Comply with health and safety guidelines and rules; managers should also ensure compliance across their teams.</p></li><li><p>
Protect Chamberlain Group&rsquo;s reputation by keeping information confidential.</p></li><li><p>
Maintain professional and technical knowledge by attending educational workshops, reading professional publications, establishing personal networks, and participating in professional societies.</p></li><li><p>
Contribute to the team effort by accomplishing related results and participating on projects as needed.</p></li><li><p>
Motivate and lead a high performance team by attracting, developing, engaging and retaining team members</p></li><li><p>
Drive the performance management and compensation processes by communicating job expectations, monitoring and evaluating performance, providing feedback and facilitating employee development per the company&rsquo;s policies</p></li><li><p>
Maintain transparent communication by appropriately communicating organization information to team through department meetings, one-on-one meetings, appropriate email, IM and regular interpersonal communications</p></li><li><p>
Lead and motivate individuals and teams to create a workplace culture that is consist</p></li></ul><p></p><p><b>
Minimum Qualifications
</b></p><p><b>Education/Certifications:</b></p><p>
Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.</p><p><b>
Experience:</b></p><ul><li><p>
7+ years of progressive experience in information security, with at least 4 years focused on cloud security engineering.</p></li></ul><p><b>
Knowledge, Skills, and Abilities:</b></p><ul><li><p>
Deep hands-on experience with both AWS and Microsoft Azure security services, including: AWS: IAM, GuardDuty, Security Hub, CloudTrail, Config, KMS, VPC security, WAF, Organizations/SCPs. Azure: Entra ID, Defender for Cloud, Azure Policy, Key Vault, NSGs, Azure Monitor, Sentinel.</p></li><li><p>
Strong experience with cloud security posture management (CSPM) platforms (e.g., Wiz, Orca, Rapid7 InsightCloudSec, CrowdStrike Falcon Cloud Security, or equivalent).</p></li><li><p>
Working knowledge of Infrastructure-as-Code (Terraform, CloudFormation, or ARM/Bicep templates) and securing IaC pipelines.</p></li><li><p>
Experience with container security (Docker, Kubernetes) and serverless security patterns. Capable of persuading non-security leaders (e.g., IT Ops, Engineering, Product) by linking security initiatives to operational continuity, consumer trust, and compliance posture.</p></li><li><p>
Solid understanding of network security principles applied to cloud environments (VPCs, transit gateways, private endpoints, zero trust network architecture).</p></li><li><p>
Familiarity with CI/CD security integration and DevSecOps practices.</p></li><li><p>
Ability to communicate complex technical concepts to both engineering peers and non-technical stakeholders.</p></li><li><p>
Collaborative approach to working across engineering, IT, and product teams.</p></li></ul><p><b>
Other:</b></p><ul><li><p>
Required to be in the office at least three days a week. Monday and Wednesday are mandatory.</p></li><li><p>
Ability to manage and monitor major incidents during non-business hours</p></li></ul><p><b>
Preferred Qualifications</b></p><p><b>
Education/Certifications:</b></p><ul><li><p>
AWS Security Specialty, Azure Security Engineer Associate (AZ-500), CCSP, CISSP, or equivalent</p></li></ul><p><b>
Experience:
</b></p><ul><li><p>Experience with cloud detection and response (CDR) tooling and cloud-native threat detection</p></li></ul><p>
#LI-Hybrid</p><p>
#LI-JM2</p><p></p>
The pay range for this position is $102,600.00 - $193,425.00; base pay offered may vary depending on a number of factors including, but not limited to, the position offered, location, education, training, and/or experience. In addition to base pay, also offered is a comprehensive benefits package and 401k contribution (all benefits are subject to eligibility requirements). This position is eligible for participation in a short-term incentive plan subject to the terms of the applicable plans and policies.
<p>Chamberlain Group wants all of its employees to succeed and encourages people of all backgrounds to apply. We&rsquo;re proud to be an Equal Opportunity Employer, and you&rsquo;ll be considered for this role regardless of race, color, religion, sex, national origin, age, sexual orientation, ancestry; marital, disabled or veteran status. We&rsquo;re committed to fostering an environment where people of all lived experiences feel welcome.
</p><p></p><p>Persons with disabilities who anticipate needing accommodations for any part of the application process may contact, in confidence Recruiting@Chamberlain.com.</p><p><br>
NOTE: Staffing agencies, headhunters, recruiters, and/or placement agencies, please do not contact our hiring managers directly.</p></div>

Lead Cloud Security Engineer

Search 2830+ Cloud security architect jobs near you this August. New roles added regularly across leading industries. Apply today.