infrastructure security architect

American Recruiting & Consulting Group

<div><h2 class="jobSectionHeader">AI Security Architect (LLM Security / Guardrails / Enterprise Architecture)</h2>
100% REMOTE! 
W2 Contract Only | No C2C / No 1099 / No Third-Party Vendors 
Must have permanent US work authorization or USA Citizenship (no sponsorship now or in the future)<h3 class="jobSectionHeader">
SUMMARY STATEMENT</h3>
ARC Group is seeking an experienced AI Security Architect for a direct client in the healthcare insurance domain. This role is responsible for designing and implementing enterprise AI security architecture, with a strong focus on securing locally hosted AI/LLM models, defining and enforcing AI guardrails, and establishing security standards, blueprints, and governance frameworks across AI-driven platforms.
This is a true Architect-level role requiring hands-on experience in AI security design, threat modeling, and control implementation across the full AI lifecycle.<h3 class="jobSectionHeader">
ESSENTIAL RESPONSIBILITIES</h3><ul><li>
Design and implement end-to-end AI security architecture for locally hosted AI/LLM platforms.</li><li>
Define and enforce AI guardrails, including prompt injection prevention, input/output filtering, and response validation controls.</li><li>
Develop and maintain enterprise security blueprints, architecture standards, and design patterns for AI/ML platforms.</li><li>
Perform AI threat modeling and identify risks such as model misuse, adversarial inputs, and data leakage.</li><li>
Implement security controls across the AI lifecycle, including data ingestion, model training, inference, and output handling.</li><li>
Establish and monitor security metrics and controls to evaluate effectiveness of AI security architecture.</li><li>
Collaborate with engineering, data science, and infrastructure teams to ensure secure AI platform design and deployment.</li><li>
Participate in architecture governance, design reviews, and technology evaluations, including build vs. buy decisions.</li><li>
Evaluate and recommend AI security tools, frameworks, and solutions aligned to enterprise standards.</li><li>
Maintain architecture documentation, security standards, and operational procedures.</li><li>
Provide leadership on emerging AI security threats, vulnerabilities, and industry trends.</li></ul><h3 class="jobSectionHeader">
REQUIRED EXPERIENCE</h3><ul><li>
10+ years of overall cybersecurity experience with strong focus on architecture and design.</li><li>
2+ years of CURRENT hands-on experience in AI security architecture (MANDATORY).</li><li>
Proven experience securing locally hosted / on-prem AI or LLM models.</li><li>
Hands-on experience implementing AI guardrails, including:<ul><li>
Prompt injection prevention</li><li>
Input/output filtering</li><li>
Response validation and policy enforcement</li></ul></li><li>
Strong experience designing end-to-end security architecture for AI/ML platforms.</li><li>
Deep understanding of AI/LLM threat landscape (prompt injection, data leakage, model abuse).</li><li>
Experience with enterprise security architecture frameworks and governance models.</li><li>
Hands-on experience with cloud security (AWS and/or Azure).</li><li>
Strong background in Identity and Access Management (IAM), RBAC, and secure access controls.</li></ul><h3 class="jobSectionHeader">
REQUIRED CERTIFICATIONS</h3><ul><li>
CISSP (REQUIRED at time of submission)<ul><li>
Certification number must be included on resume</li><li>
Will be validated during background screening</li></ul></li></ul><h3 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h3><ul><li>
Experience in healthcare or other regulated environments (HIPAA, PHI protection).</li><li>
Experience working in Agile / Scaled Agile environments.</li><li>
Exposure to AI governance frameworks, compliance, or risk management practices.</li><li>
Experience with enterprise security monitoring, metrics, and risk reporting.</li></ul><h3 class="jobSectionHeader">
ADDITIONAL REQUIREMENTS</h3><ul><li>
Must demonstrate true architecture ownership (not just implementation or support roles).</li><li>
Must have current, hands-on involvement in AI security architecture initiatives.</li><li>
Strong communication skills with ability to explain complex security architectures to technical and non-technical stakeholders.</li><li>
Must be actively staying current with rapidly evolving AI security technologies and threats.</li></ul>
-
ARC Group is a Forbes-ranked top 20 recruiting and executive search firm working with clients nationwide to recruit the highest quality technical resources. We achieve this by understanding both our candidates&rsquo; and clients&rsquo; goals and serving both with integrity and a shared desire to succeed.
At ARC Group, we are committed to providing equal employment opportunities and fostering an inclusive work environment. We encourage applications from all qualified individuals regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or any other protected status.
Position offered with no fee to the candidate.
z3AXN0x92B</div>

AI Security Architect

<div>AI, Security Architect

At BNY, our culture allows us to run our company better and enables employees&rsquo; growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world&rsquo;s investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance &ndash; and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We&rsquo;re seeking a future team member for the role of AI Security Architect to join our Cybersecurity team. This role can be in Pittsburgh, PA or Lake Mary, FL or NYC, NY.
Overview

BNY is seeking a AI Security Architect to lead the design, implementation, and governance of security controls for AI/ML systems across the enterprise. This role will define the target architecture and security patterns for AI-enabled products and platforms, ensuring resilient, compliant, and trustworthy AI. The ideal candidate combines deep expertise in cybersecurity and cloud with hands-on knowledge of modern AI/ML infrastructure, data protection, adversarial threat models, and secure MLOps.

Primary Responsibilities
<ul>
<li>Define enterprise AI security architecture: develop reference architectures, guardrails, and standards for secure data pipelines, model training/inference, and AI-integrated applications across on-prem and cloud.</li>
<li>Secure MLOps/ML platforms: architect identity, secrets management, network segmentation, and least-privilege access for feature stores, model registries, orchestration, and deployment pipelines.</li>
<li>Data protection by design: establish controls for sensitive data ingestion, anonymization/pseudonymization, encryption (at rest/in transit), tokenization, and lineage across AI workflows.</li>
<li>Adversarial ML defense: design controls and tests for model poisoning, evasion, model theft/exfiltration, prompt injection, jailbreaking, data leakage, and output manipulation.</li>
<li>AI supply chain security: govern third-party models, APIs, and datasets; enforce SBOMs for AI components; evaluate provenance, licensing, and dependency risk.</li>
<li>Policy and governance integration: translate AI security requirements into actionable standards and control evidence; align with enterprise risk, compliance, and model governance processes.</li>
<li>Threat modeling and security testing: lead threat modeling for AI systems; design red-teaming and secure evaluation methods for models and agents; integrate chaos/resilience testing.</li>
<li>Secure development lifecycle: embed AI-specific security checks (static/dynamic scans, IaC policy-as-code, data quality gates, bias/robustness checks) into CI/CD and change management.</li>
<li>Runtime protection: implementing guardrails, content filters, output validation, rate limiting, anomaly detection, and monitoring for AI services and agentic workflows.</li>
<li>Observability and incident response: define logging/telemetry (model inputs/outputs, drift, performance, safety events); integrate AI-specific playbooks into SOC operations.</li>
<li>Zero Trust for AI: design identity-aware access, micro-segmentation, and continuous verification for data scientists, services, and agents.</li>
<li>Privacy and ethics controls: partner with privacy and legal to operationalize consent, minimization, purpose limitation, and responsible AI guardrails, including human-in-the-loop where appropriate.</li>
<li>Resilience and continuity: design disaster recovery, backup/restore, model reproducibility, and contingency plans for AI platforms and critical use cases.</li>
<li>Vendor/platform assessments: evaluate cloud AI services, open-source frameworks, and commercial tools for security posture, compliance, and fit-for-purpose.</li>
<li>Risk management: lead control testing and risk assessments for AI initiatives; document residual risks and remediation plans; support audits and regulatory queries.</li>
<li>Reference implementations: deliver secure patterns, sample code, and automation (e.g., reusable Terraform/Policy-as-Code, secrets patterns, logging schemas) to accelerate adoption.</li>
<li>Stakeholder leadership: partner with platform engineering, data science, enterprise architecture, cyber operations, and product teams to drive end-to-end secure outcomes.</li>
<li>Coaching and enablement: build education and guidance for architects, data scientists, and engineers on secure AI practices, design patterns, and common pitfalls.</li>
<li>Continuous improvement: track emerging threats, standards, and best practices; lead updates to architecture and controls; measure effectiveness via KPIs and control health.</li>
</ul>
Required Qualifications
<ul>
<li>12 years in cybersecurity/enterprise security architecture with 3 years focused on AI/ML or data platform security at scale.</li>
<li>Expertise in cloud security (AWS/Azure/GCP) including identity, secrets management, key management (KMS/HSM), network segmentation, and policy-as-code.</li>
<li>Strong knowledge of AI/ML workflows: data ingestion/feature engineering, model training/inference, MLOps tooling (model registry, orchestrators, serving).</li>
<li>Practical experience with adversarial ML concepts and defenses; familiarity with model robustness, prompt injection risks, and secure evaluation methods.</li>
<li>Proficiency in designing observability/telemetry for AI systems (e.g., logging prompts/outputs, drift/quality metrics, safety events) with SIEM/SOAR integration.</li>
<li>Hands-on with infrastructure-as-code (Terraform/CloudFormation), CI/CD, and secure SDLC practices tailored to data/ML systems.</li>
<li>Deep understanding of data protection (encryption, tokenization, anonymization), privacy by design, and secure data lifecycle management.</li>
<li>Strong stakeholder management and communication skills; ability to convert complex risks into clear architecture decisions and implementation guidance.</li>
</ul>
Preferred Qualifications
<ul>
<li>Experience architecting secure AI agents and LLM applications including guardrails, content filters, and output validation.</li>
<li>Familiarity with standards and frameworks relevant to AI and data (e.g., NIST AI RMF, cloud CIS benchmarks, OWASP for ML/LLM, privacy controls).</li>
<li>Background in model governance and risk management (e.g., testing for drift, bias, stability, and explainability) and integration with enterprise control frameworks.</li>
<li>Programming/scripting proficiency (Python preferred) for reference implementations, automation, and security tooling integrations.</li>
<li>Experience with container security, Kubernetes, service mesh, and microservices patterns in AI platforms.</li>
<li>Prior leadership in enterprise-scale transformations, enabling secure adoption of AI across multiple business lines.</li>
</ul>
At BNY, our culture speaks for itself, check out the latest BNY news at:

BNY Newsroom

BNY LinkedIn
 Here&rsquo;s a few of our recent awards:
<ul>
<li>America&rsquo;s Most Innovative Companies, Fortune, 2025</li>
<li>World&rsquo;s Most Admired Companies, Fortune 2025</li>
<li>&ldquo;Most Just Companies&rdquo;, Just Capital and CNBC, 2025</li></ul> 
 
Our Benefits and Rewards:

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life&rsquo;s journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter. 
BNY assesses market data to ensure a competitive compensation package for our employees. The base salary for this position is expected to be between $142,000 and $259,000 per year at the commencement of employment. However, base salary if hired will be determined on an individualized basis, including as to experience and market location, and is only part of the BNY total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, short and long-term incentive packages, and Company-sponsored benefit programs. 
This position is at-will and the Company reserves the right to modify base salary (as well as any other discretionary payment or compensation) at any time, including for reasons related to individual performance, change in geographic location, Company or individual department/team performance, and market factors.</div>

Capgemini

<div><div><div><div>Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you&rsquo;d like, where you&rsquo;ll be supported and inspired by a collaborative community of colleagues around the world, and where you&rsquo;ll be able to reimagine what&rsquo;s possible. Join us and help the world&rsquo;s leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
<div><div><div><h2 class="jobSectionHeader">Location</h2>
</div><div>This role is based in Pittsburgh, PA - Lake Mary, FL or New York City.
</div></div><div><div><h2 class="jobSectionHeader">About the Job You're Considering</h2>
</div><div>Drive the technical design and full-lifecycle integration of comprehensive security control frameworks. By leveraging a deep, architectural understanding of foundational risk models (e.g., NIST SP 800-53, CSF, ISO 27001), this architect translates rigorous compliance mandates into resilient, scalable cloud infrastructure. Their holistic approach to boundary definition, automated enforcement, and zero-trust principles ensures that security is engineered organically into the environment, continuously satisfying complex third-party assessment criteria.
</div></div><div><div><h2 class="jobSectionHeader">Your Role</h2>
</div><div>Key Responsibilities
<ul><li>Implement and enforce FedRAMP controls in cloud platforms</li>
<li>Review existing security frameworks and close gaps between standards and implementation</li>
<li>Deploy and validate security policies and rule sets</li>
<li>Work with data protection and cryptography teams to enforce cloud security controls</li>
<li>Ensure security controls are effective, auditable, and operational</li>
<li>Identify issues like over‑provisioning and under‑utilization from a security and governance perspective</li>
</ul>What We&rsquo;re Looking For
<ul><li>Very hands-on profile &mdash; must know how to &ldquo;do&rdquo;, not just &ldquo;review&rdquo;</li>
<li>Strong blend of architecture knowledge + engineering execution</li>
<li>Experience in regulated or enterprise cloud environments preferred</li> 
</ul></div></div><div><div><h2 class="jobSectionHeader">Your Skills And Experience</h2>
</div><div>Must‑Have Skills
<ul><li>Full-Lifecycle Engineering: 'Demonstrated experience in the end-to-end integration of rigorous control frameworks (e.g., NIST 800-53, ISO 27001, SOC 2, CMMC)&mdash;from initial gap analysis and architectural design through deployment, automated enforcement, and continuous monitoring.'</li>
<li>Control Translation: 'Proven ability to dissect complex regulatory catalogs and translate them into actionable, technical engineering requirements for Azure infrastructure and DevSecOps pipelines.'</li>
<li>Boundary &amp; Scoping Expertise: 'Expertise in defining complex authorization boundaries, architecting secure enclaves, and implementing microsegmentation to isolate regulated data and reduce the overall audit footprint.'</li>
<li>Compensating Controls: 'Adept at designing and documenting robust compensating controls and operational workarounds when native technical enforcement of a framework requirement is unfeasible.'</li>
<li>Ability to work with multiple teams and drive controls into production</li>
</ul></div></div></div>The base compensation range for this role in the posted location is: $105,570 - $215,050 USD
Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.
These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.
It is not typical for candidates to be hired at or near the top of the posted compensation range.
In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws. 
Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:
<ul><li>Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave</li>
</ul><ul><li>Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)</li>
<li>Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)</li>
<li>Life and disability insurance</li>
<li>Employee assistance programs</li>
<li>Other benefits as provided by local policy and eligibility</li>
</ul>Important Notice: Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini&rsquo;s discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation. 
Disclaimers
Capgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.
This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.
Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.
Click the following link for more information on your rights as an Applicant in the United States. http://www.capgemini.com/resources/equal-employment-opportunity-is-the-law 
Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.</div></div></div></div>

Azure Cybersecurity Architect

Acenet consulting

<div><div>Experience: 10 to 15 years
 
Location: Abu Dhabi
 
Job code: 101484
 
Posted on: Apr 17, 2026 
</div> 
About Us: 
AceNet Consulting is a fast-growing global business and technology consulting firm leveraging a consultative approach, deep domain expertise and strong technology capabilities across business transformation, IT strategy &amp; architecture, digital transformation, data engineering &amp; analytics, AI/ML, cloud &amp; infrastructure, enterprise applications and emerging technologies to deliver value to our global clients. AceNet&rsquo;s marquee clients include Tier-1 and Tier-2 banking &amp; financial services, asset &amp; wealth management, healthcare, consumer retail, eCommerce &amp; logistics, engineering, government &amp; public sectors, consulting and technology firms. With presence across Abu Dhabi UAE, Texas USA and India (Bangalore, Gurgaon &amp; Pune), AceNet brings strong consulting and delivery capabilities across project staffing, managed services, outsourcing and offshoring.
Job Summary: 
We are seeking a Senior Azure AI Infrastructure Architect to lead the design, governance, security, and operationalization of AI infrastructure on Microsoft Azure. Operating within a centralized Cloud Center of Excellence (CoE), this role will act as the enterprise platform authority for Azure AI services. The architect will partner closely with application teams, data scientists, security, networking, and operations teams to provision, secure, optimize, and transition AI solutions into production at scale. This is a senior-level role requiring deep Azure expertise, strong governance orientation, and the ability to enable AI innovation within a controlled, secure enterprise framework.
<div>Key Responsibilities: 
<ul><li>Design and maintain enterprise-grade Azure AI resources.</li><li>Architect infrastructure for Azure OpenAI, Azure Machine Learning, Azure AI Services, GPU-based compute environments, and AKS for AI workloads.</li><li>Define subscription strategy, resource group structure, tagging standards, and naming conventions aligned with CoE governance.</li><li>Design secure networking architectures including VNET segmentation, Private Endpoints, Firewall, and NSGs.</li><li>Continuously monitor and improve security posture using Microsoft Defender for Cloud and related tools.</li><li>Implement least-privilege RBAC models and ensure secure identity integration.</li><li>Enforce governance controls using Azure Policy and Management Groups.</li><li>Review AI solution architectures and participate in architecture review boards.</li><li>Monitor and optimize AI workload costs using Azure Cost Management and FinOps practices.</li><li>Implement Infrastructure as Code using Terraform (preferred), Bicep, or ARM templates.</li><li>Support CI/CD pipelines and controlled change and release management processes.</li><li>Develop operational runbooks and ensure smooth transition of AI services to operations teams.</li><li>Act as the primary AI infrastructure advisor within the Cloud CoE and guide stakeholders on best practices.</li></ul></div>
<div>Required Skills &amp; Experience: 
<ul><li>Deep hands-on expertise in Microsoft Azure and Azure AI services.</li><li>Strong experience designing AI landing zones and enterprise cloud architectures.</li><li>Advanced knowledge of Azure networking (VNETs, Private Link, Hybrid connectivity).</li><li>Strong expertise in Azure RBAC, Entra ID, Managed Identities, Azure Policy, and Key Vault.</li><li>Experience with Microsoft Defender for Cloud and enterprise security monitoring.</li><li>Hands-on experience with Infrastructure as Code and CI/CD pipelines.</li><li>Strong FinOps mindset and experience managing Azure cost optimization.</li><li>10+ years in IT infrastructure/cloud architecture.</li><li>5+ years of hands-on Azure architecture experience.</li><li>Experience operating within a centralized Cloud CoE model.</li><li>Preferred Certifications:</li><li>Microsoft Certified: Azure Solutions Architect Expert</li><li>Microsoft Certified: Azure Security Engineer Associate</li><li>Microsoft Certified: Azure AI Engineer Associate</li><li>Microsoft Certified: Azure Administrator Associate</li></ul></div>
<div>Why Join Us: 
<ul><li>Opportunities to work on transformative projects, cutting-edge technology and innovative solutions with leading global firms across industry sectors.</li><li>Continuous investment in employee growth and professional development with a strong focus on up &amp; re-skilling.</li><li>Competitive compensation &amp; benefits, ESOPs and international assignments.</li><li>Supportive environment with healthy work-life balance and a focus on employee well-being.</li><li>Open culture that values diverse perspectives, encourages transparent communication and rewards contributions.</li></ul></div>
How to Apply: 
If you are interested in joining our team and meet the qualifications listed above, please apply and submit your resume highlighting why you are the ideal candidate for this position.</div>

Senior Azure AI Infrastructure Architect

EverFi

<div>Everfi is a leading education technology company founded in 2008 that delivers digital learning solutions focused on real-world skills. The company provides scalable education in areas such as financial literacy, health and wellness, and workplace readiness.
We are seeking a Cloud Architecture Engineer, Senior Principal to support the reliability, scalability, security, and strategic evolution of EVERFI's PaaS systems, while acting as a force multiplier for the broader engineering organization. The Cloud Architecture Engineer, Senior Principal is expected to operate with a high degree of autonomy, make consequential architectural decisions, and represent cloud infrastructure to senior leadership as needed. 
Cloud Architecture Engineer, Senior Principal Compensation and Benefits
$170,000-$185,000 annual base salary depending on experience and education. Everfi may pay more or less based on employee qualifications, market value, Company finances, and other operational considerations.
This role is eligible to participate in the Corporate Bonus Plan
100% Remote position
Health, Dental, and Vision insurance
401(K) with matching contribution
Generous Paid Time Off (PTO) 
Cloud Architecture Engineer, Senior Principal Responsibilities
Strategic Architecture &amp; Technical Vision<ul><li>
Shape and execute the multi-year cloud architecture strategy for EVERFI's platform, aligning infrastructure direction with business growth, product roadmap, and organizational scalability goals</li></ul><ul><li>
Lead enterprise-wide architecture reviews and establish cloud governance standards, guardrails, and best practices adopted across all engineering teams</li></ul><ul><li>
Identify and evaluate emerging technologies (e.g., AI/ML infrastructure, FinOps, platform engineering tooling) and make forward-looking recommendations to VP and CTO leadership</li></ul><ul><li>
Serve as a technical decision-maker and escalation point for complex, cross-functional cloud architecture challenges</li></ul><ul><li>
Drive the evolution of EVERFI's platform from reactive infrastructure management to proactive, resilience-first platform engineering</li></ul>
Platform Engineering &amp; Infrastructure<ul><li>
Design, build, maintain, and monitor internal PaaS systems in the cloud at enterprise scale &mdash; with a focus on high availability, fault tolerance, and cost efficiency</li></ul><ul><li>
Lead the implementation of geographically redundant, multi-region, and highly available architectures capable of supporting EVERFI's growth trajectory</li></ul><ul><li>
Architect and oversee the full lifecycle of cloud deployment tooling, ensuring CI/CD systems are continuously optimized for speed, safety, and developer experience</li></ul><ul><li>
Design reliable, interoperable components and utility libraries that underpin EVERFI's applications across engineering teams</li></ul><ul><li>
Architect and own a comprehensive metrics, monitoring, and observability system enabling full-stack visibility, proactive incident response, and SLA enforcement</li></ul>
Security, Compliance &amp; Risk<ul><li>
Ensure all cloud environments are designed and administered in accordance with company security guidelines, SOC 2 compliance requirements, FERPA, and applicable data privacy regulations</li></ul><ul><li>
Architect zero-trust networking, identity and access management (IAM), and data encryption frameworks across EVERFI's cloud environments</li></ul><ul><li>
Partner with Security and Legal teams to lead cloud risk assessments and drive remediation of architectural vulnerabilities at the platform level</li></ul>
Cross-Functional Leadership &amp; Influence<ul><li>
Act as a senior technical advisor to Engineering, Product, and Executive leadership on all cloud infrastructure decisions &mdash; translating complex technical tradeoffs into clear business impact</li></ul><ul><li>
Champion engineering culture: establish and promote best practices for reliability, performance, and operational excellence across all teams consuming cloud infrastructure</li></ul><ul><li>
Build training programs, playbooks, and knowledge resources that upskill engineering teams on cloud operations, architecture patterns, and performance optimization</li></ul><ul><li>
Represent the Cloud Architecture function in cross-functional planning, capacity modeling, and strategic workforce design discussions</li></ul>
Mentorship &amp; Talent Development<ul><li>
Provide mentorship, technical guidance, and career development support to Principal, Staff, and Senior Engineers on the Cloud Architecture team and adjacent teams</li></ul><ul><li>
Participate in hiring, technical interviews, and calibration discussions as needed</li></ul><ul><li>
Participate in an on-call rotation to provide emergency incident support as needed, modeling expected standards of operational excellence for the team</li></ul> 
Cloud Architecture Engineer, Senior Principal Qualifications<ul><li>
Bachelor's Degree in Computer Science, Engineering, or equivalent combination of education and experience required; Master's degree strongly preferred</li></ul><ul><li>
10+ years of progressive professional experience in cloud infrastructure, platform engineering, or systems architecture</li></ul><ul><li>
Minimum 3&ndash;5 years of experience operating at the Principal or Staff Engineer level, with demonstrated ownership of enterprise-wide architectural decisions</li></ul><ul><li>
Proven track record of leading large-scale cloud transformations, platform modernizations, or migrations in high-growth SaaS environments</li></ul><ul><li>
Experience in EdTech, FinTech, or compliance-heavy industries strongly preferred</li></ul>
Certifications (Preferred)<ul><li>
AWS Solutions Architect &ndash; Professional (or equivalent Azure/GCP professional-level certification)</li></ul><ul><li>
AWS Security Specialty or Certified Cloud Security Professional (CCSP)</li></ul><ul><li>
Kubernetes Administrator (CKA) or equivalent</li></ul>
Technical Skills<ul><li>
Cloud Platforms: Deep expertise in AWS (required); hands-on experience with Azure and/or GCP preferred</li></ul><ul><li>
Infrastructure as Code: Terraform, AWS CloudFormation, Pulumi, or CDK at enterprise scale</li></ul><ul><li>
Containerization &amp; Orchestration: Docker, Kubernetes (EKS/AKS/GKE), Kafka</li></ul><ul><li>
CI/CD &amp; DevOps: Advanced pipeline design with Jenkins, GitHub Actions, ArgoCD, or equivalent</li></ul><ul><li>
Networking &amp; Security: TCP/IP, DNS, SMTP, HTTP, VPCs, zero-trust architecture, WAF, distributed networks</li></ul><ul><li>
Programming &amp; Scripting: Python, Go, Ruby on Rails, or Bash (proficiency in at least two)</li></ul><ul><li>
Data &amp; Storage: SQL and NoSQL (Postgres and equivalents); familiarity with data lake and lakehouse architectures</li></ul><ul><li>
Observability: Datadog, New Relic, Prometheus/Grafana, or equivalent full-stack observability platforms</li></ul><ul><li>
AI/ML Infrastructure: Familiarity with cloud-native AI/ML infrastructure (SageMaker, Vertex AI, or equivalent) preferred</li></ul><ul><li>
Open-Source Ecosystem: Extensive experience contributing to and consuming open-source tooling in production environments</li></ul><ul><li>
Web Services &amp; APIs: Expert-level knowledge of REST, RPC, SOA, and API design principles</li></ul></div>

Cloud Architecture Engineer, Senior Principal

Asian Global Infotech

Urgent Hiring &ndash; L3 Network Administrator (CCIE)Location: Dubai, UAE (Onsite &ndash; UCMC Dubai) Client: Healthcare Position Type: Full-Time Salary: upto AED 18,000 + Single Benefits Joining: Immediate to Maximum 1 Month Nationality: OpenProfiles with CCIE certification are mandatory.Job TitleSenior L3 Network Administrator / Network Architect (CCIE)Job SummaryWe are looking for a highly experienced L3 Network Engineer / Architect (8&ndash;10 years) with CCIE certification to lead enterprise network architecture, security, and cloud networking initiatives.The role demands deep expertise in security (Zero Trust), Azure networking (L3), and multi-vendor enterprise environments, along with the ability to handle critical escalations, architecture validation, and performance optimization.Key Responsibilities1. Network Architecture &amp; Design<ul><li>Act as the technical authority for enterprise and hybrid cloud network architecture.</li><li>Review and validate HLDs &amp; LLDs for complex network/security designs.</li><li>Drive scalability, resiliency, and performance improvements.</li><li>Lead architecture decisions across multi-vendor environments.</li></ul>2. Advanced Support &amp; Escalation Handling<ul><li>Serve as the final escalation point for critical network incidents.</li><li>Lead incident bridges and service restoration efforts.</li><li>Identify root causes and implement long-term stability improvements.</li></ul>3. Security &amp; Zero Trust Architecture<ul><li>Lead security design and firewall architecture including:</li><li>Palo Alto Firewalls (Expert Level)</li><li>Cisco Firepower Threat Defense (FTD)</li><li>Drive network segmentation &amp; Zero Trust implementation.</li><li>Ensure alignment with enterprise security standards &amp; compliance frameworks.</li></ul>4. Cloud &amp; Hybrid Networking (Azure &ndash; L3)<ul><li>Provide L3 support for:</li><li>VNet architecture, routing, UDRs, NSGs</li><li>Azure VPN Gateway &amp; hybrid connectivity</li><li>Ensure secure connectivity between on-prem and Azure environments.</li><li>Optimize cloud performance, availability, and security.</li></ul>5. Core Network Engineering<ul><li>Manage routing &amp; switching:</li><li>BGP, OSPF</li><li>SD-WAN, LAN/WAN optimization</li><li>Govern DNS, DHCP, and core network services.</li></ul>6. Cisco Ecosystem (Advanced Platforms)<ul><li>Provide expert-level support for:</li><li>Cisco DNA Center (DNAC) &ndash; automation &amp; analytics</li><li>Cisco ISE &ndash; NAC &amp; policy enforcement</li><li>Cisco WLC &ndash; enterprise wireless networks</li></ul>7. Load Balancing &amp; Application Delivery<ul><li>Architect and manage F5 Load Balancers:</li><li>Traffic management &amp; optimization</li><li>High availability and resilience</li></ul>8. Governance, Compliance &amp; Capacity Planning<ul><li>Lead capacity planning &amp; performance management.</li><li>Ensure audit readiness &amp; compliance across all network platforms.</li><li>Maintain architecture documentation and governance standards.</li></ul>9. Change Management &amp; Leadership<ul><li>Participate in / lead Change Advisory Board (CAB).</li><li>Approve high-risk network changes.</li><li>Mentor L2/L3 engineers and provide technical leadership.</li></ul>Required Skills &amp; ExperienceExperience<ul><li>8&ndash;10 years in enterprise network engineering</li><li>Proven experience in L3 / Architect-level roles</li><li>Experience in large-scale, mission-critical environments</li></ul>Mandatory Technical Skills<ul><li>✅ CCIE (Enterprise Infrastructure or Security) &ndash; Mandatory</li><li>✅ Palo Alto Firewalls (Expert &ndash; segmentation &amp; Zero Trust)</li><li>✅ Cisco Firepower Threat Defense (FTD)</li><li>✅ Microsoft Azure Networking (L3 Level)</li><li>✅ Cisco DNAC, ISE, WLC</li><li>✅ F5 Load Balancers</li><li>✅ Strong expertise in:</li><li>BGP, OSPF, SD-WAN</li><li>LAN/WAN technologies</li><li>DNS, DHCP</li></ul>CertificationsMandatory<ul><li>CCIE (Enterprise Infrastructure or Security)</li></ul>Preferred<ul><li>Palo Alto: PCNSE</li><li>Microsoft Azure: AZ-700</li><li>F5: Certified Administrator / Specialist</li><li>ITIL&reg; 4 Foundation</li></ul>Key Hiring Focus<ul><li>Strictly CCIE-certified candidates</li><li>Strong hands-on + architecture-level experience</li><li>Immediate or short notice candidates preferred</li></ul>Call to ActionSubmit relevant CVs at lakshmi@asianglobalinfotech.com &amp; Kavya@asianglobalinfotech.com ⚡ Priority goes to candidates with CCIE + Security + Azure + F5 expertiseJob Type: Full-timePay: Up to AED18,000.00 per monthApplication Question(s):<ul><li>Do you hold a valid CCIE certification (Enterprise Infrastructure or Security)?</li><li>How many years of experience do you have in L3 network engineering or network architecture?</li><li>Do you have hands-on experience with Palo Alto firewalls and network segmentation / Zero Trust?</li></ul>Brief details if Yes<ul><li>Do you have experience with Microsoft Azure networking (VNet, VPN Gateway, NSG, routing)?</li><li>Are you currently available to join within 1 month or less?</li></ul>Work Location: In person

L3 Network Administrator (CCIE)

VTG Defense

<div>Overview:
<div>
We are seeking an experienced AWS Cloud Architect to design, implement, and manage scalable, secure, and highly available cloud solutions. This role will lead cloud architecture strategy, drive modernization initiatives, and partner with engineering and business teams to deliver cloud-native solutions aligned with organizational goals.</div>
Responsibilities:
<ul><li>Design and architect scalable, resilient, and cost-effective solutions using AWS services</li><li>
Lead cloud migration and modernization efforts from on-premises to AWS</li><li>
Develop cloud architecture frameworks, standards, and best practices</li><li>
Collaborate with DevOps, engineering, and security teams to implement CI/CD pipelines and automation</li><li>
Ensure cloud environments meet security, compliance, and governance requirements</li><li>
Optimize cloud infrastructure for performance, scalability, and cost efficiency</li><li>
Provide technical leadership and mentorship to engineering teams</li><li>
Evaluate new AWS services and emerging technologies to improve platform capabilities</li><li>
Troubleshoot complex cloud infrastructure and application issues</li></ul>
Qualifications:
<ul><li>Active TS/SCI with Polygraph required.
</li><li>Bachelor&rsquo;s degree in Computer Science, Information Technology, or related field (or equivalent experience)</li><li>
8+ years of IT experience with at least 3+ years in cloud architecture</li><li>
Hands-on experience designing and deploying solutions in AWS</li><li>
Strong knowledge of AWS core services (EC2, S3, RDS, Lambda, VPC, IAM, CloudFormation)</li><li>
Experience with infrastructure as code (Terraform, CloudFormation)</li><li>
Proficiency in scripting or programming (Python, Bash, or similar)</li><li>
Deep understanding of networking, security, and distributed systems</li><li>
Experience with containerization technologies (Docker, Kubernetes)</li><li>
Familiarity with CI/CD tools (Jenkins, GitLab CI/CD, or similar)</li></ul></div><div></div>

AWS Cloud Architect

Search 10000+ Infrastructure security architect jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 infrastructure security architect jobs Near Me

AI Security Architect

AI Security Architect

Azure Cybersecurity Architect

Senior Azure AI Infrastructure Architect

Cloud Architecture Engineer, Senior Principal

L3 Network Administrator (CCIE)

AWS Cloud Architect