Role Summary

Key Responsibilities

Multi-Cloud Security Architecture

• • Define and maintain enterprise cloud security architecture standards across AWS, Azure, and GCP.
  • Develop secure landing zones, reference architectures, and cloud security guardrails.
  • Establish architecture patterns for:
  • Multi-cloud deployments
  • Hybrid cloud environments
  • SaaS platforms
  • AI/ML workloads
  • Kubernetes platforms
  • Review and approve security designs for new cloud initiatives and customer engagements.
  • Drive Zero Trust Architecture adoption across all cloud platforms.

Cloud Security Engineering & DevSecOps

• • Embed security controls into CI/CD and Infrastructure-as-Code pipelines.
  • Implement Security-as-Code and Policy-as-Code frameworks.
  • Automate compliance validation and security posture assessments.
  • Establish secure software supply chain controls.
  • Drive secure container, Kubernetes, and serverless security practices.
  • Integrate automated vulnerability and misconfiguration detection into engineering workflows.

Security Operations & Threat Management

• • Define and oversee cloud security monitoring, detection, and response capabilities.
  • Establish multi-cloud threat detection strategies.
  • Lead security incident response and forensic investigations.
  • Drive vulnerability management programs across cloud platforms.
  • Implement cloud-native threat intelligence and proactive threat hunting capabilities.
  • Develop operational runbooks and security response automation.

Governance, Risk & Compliance

• • Develop cloud security governance frameworks and policies.
  • Establish cloud risk management and control assessment processes.
  • Lead compliance initiatives including:
  • ISO 27001
  • SOC 2
  • PCI DSS
  • GDPR
  • HIPAA
  • NIST CSF
  • CIS Benchmarks
  • Support customer security reviews and regulatory audits.
  • Build continuous compliance monitoring capabilities.

Identity, Access & Data Security

• • Define enterprise IAM strategy across AWS, Azure, and GCP.
  • Implement Zero Trust and least-privilege access models.
  • Standardize:
  • MFA
  • SSO
  • Federated Identity
  • Privileged Access Management
  • Lead secrets management and encryption strategy.
  • Define enterprise data classification and protection controls.

AI & Emerging Security

• • Secure GenAI and AI/ML platforms deployed in cloud environments.
  • Establish governance controls for AI workloads.
  • Define security standards for LLM deployments and AI-assisted operations.
  • Assess risks associated with AI services and third-party integrations.
  • Collaborate with AI engineering teams to implement secure AI architectures.

Leadership & Organizational Responsibilities

• • Build and lead a Cloud Security Center of Excellence within SRE.
  • Mentor Cloud Security Engineers and Security Analysts.
  • Partner with Strategic Account Directors, TAMs, Cloud Architects, and Delivery Leaders.
  • Provide executive-level reporting on security posture, risks, and remediation plans.
  • Support customer-facing security discussions and solution reviews.

Required Qualifications

• • 12–15+ years of experience in Infrastructure, Cloud, Security, or SRE domains.
  • Minimum 7+ years of cloud security experience.
  • Minimum 3+ years leading cloud security teams or programs.
  • Hands-on expertise across AWS, Azure, and GCP.
  • Strong understanding of:
  • Cloud-native architectures
  • Kubernetes
  • DevSecOps
  • Identity Security
  • Compliance frameworks
  • Security Operations
  • Experience supporting enterprise-scale SaaS environments.
  • Strong customer-facing and consulting capabilities.

Preferred Certifications

• • AWS Certified Security – Specialty
  • AWS Solutions Architect Professional
  • Microsoft Certified: Cybersecurity Architect Expert
  • Google Professional Cloud Security Engineer
  • CISSP
  • CCSP
  • CISM
  • CKS (Certified Kubernetes Security Specialist)

Success Metrics (KPIs)

• • Reduction in critical cloud security findings.
  • Cloud Security Posture Management (CSPM) score improvement.
  • Compliance audit pass rates.
  • Security incident reduction.
  • MTTD and MTTR improvements.
  • Percentage of infrastructure compliant by default.
  • Vulnerability remediation SLA adherence.
  • Customer security audit success rate.
  • Security automation coverage across cloud platforms.

Reporting Structure