Security & Infrastructure Architect

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security & Infrastructure Architect based in the United States.

The Security & Infrastructure Architect will shape and strengthen security architecture across a growing multi-cloud environment spanning AWS and Azure. This role is responsible for defining secure configuration standards, assessing existing infrastructure, and ensuring that new cloud services and designs meet established security requirements before deployment. You will collaborate closely with infrastructure, platform, reliability, IT Operations, and Compliance teams to turn security requirements into practical technical solutions. The position combines cloud security architecture, infrastructure design, continuous monitoring, and compliance support in a complex and evolving technology environment. You will also establish reusable architecture patterns and documentation that help teams make consistent, secure decisions. This is an opportunity to influence security practices across cloud, identity, endpoint, network, and enterprise systems.

Accountabilities:

• Define and maintain secure configuration standards across AWS and Azure, covering identity and access management, network boundaries, encryption, logging, secrets management, and workload protection.

• Assess cloud environments against established security baselines, identify gaps, and prioritize remediation activities.

• Translate assessment findings into actionable technical recommendations and implementation guidance for engineering teams.

• Partner with platform, infrastructure, and site reliability engineering teams to embed security requirements into new cloud services and infrastructure-as-code workflows.

• Review cloud architecture proposals and infrastructure-as-code changes for security risks before implementation.

• Maintain and evolve cloud security standards as platforms, services, and organizational requirements change.

• Develop hardened configuration baselines for operating systems, cloud services, and infrastructure using DISA STIGs, CIS Benchmarks, or equivalent standards.

• Define scan and monitoring coverage in alignment with authorization boundaries, ensuring newly deployed systems are appropriately included.

• Create and maintain architecture standards, reference patterns, technical diagrams, and design decision records.

• Review infrastructure, platform, and integration designs, identifying security concerns early enough to influence technical decisions.

• Maintain accurate current-state architecture documentation across cloud environments, identity systems, endpoints, SaaS platforms, networks, and integrations.

• Translate security and compliance requirements into technical configurations and design guidance that IT Operations and engineering teams can implement.

• Provide Compliance teams with architecture documentation and technical evidence to support System Security Plans, audits, and ongoing assessments.

• Identify opportunities to use automation and AI tools to improve security assessments, configuration checks, evidence collection, and overall productivity.

Requirements:

• At least 5 years of experience in cloud engineering, infrastructure, systems engineering, or security engineering.

• At least 3 years in an architecture, senior engineering, or technical design role focused on establishing standards and guiding implementation.

• Strong hands-on expertise in AWS or Azure security configuration, together with working knowledge of the other platform.

• Experience reviewing or developing infrastructure as code, particularly with Terraform.

• Familiarity with cloud security posture management tools and the ability to distinguish meaningful security findings from false positives or low-priority alerts.

• Practical experience implementing hardened configuration baselines using DISA STIGs, CIS Benchmarks, or comparable frameworks.

• Working knowledge of continuous monitoring requirements under FedRAMP or GovRAMP, including scan coverage and evidence expectations.

• Experience automating configuration validation, security checks, or compliance evidence collection.

• Familiarity with enterprise IT environments and tools, including Microsoft 365, Entra ID, Active Directory, Okta, MDM/UEM platforms, EDR, and SIEM solutions.

• Strong technical documentation skills, including architecture diagrams, standards, decision records, and design reviews.

• Familiarity with compliance frameworks such as GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001.

• Ability to influence technical decisions through sound judgment and clear communication, even without direct ownership of the teams involved.

• Good judgment in determining when to escalate security concerns and when to defer to the accountable technical team.

• An AI-forward mindset, with demonstrated experience using AI tools responsibly to improve productivity, decision-making, and work quality.

• Strong analytical, problem-solving, communication, and cross-functional collaboration skills.

• Authorization to work in the United States; visa sponsorship is not available now or in the future.

Benefits:

• Estimated salary grade range: $104,400–$156,600.

• Anticipated hiring range: $115,000–$125,000, depending on skills, qualifications, experience, and other relevant factors.

• Comprehensive health insurance.

• Dental and vision insurance.

• Flexible Time Off.

• 401(k) retirement plan.

• Additional benefits as part of the comprehensive employee package.

• Remote work arrangement within the United States.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.