Cloud Security Architect

Description

Storytelling is central to the company's work.

The company is a global media and entertainment business with three segments: Studios, Direct-to-Consumer, and TV Media. Its portfolio covers studio, streaming and TV brands.

This is a hands-on security leadership role focused on designing, securing and assessing large public cloud environments. You would be a senior member of the Cloud Security team in the information security group, working with engineering and product teams to build security into cloud architectures, platforms and workflows. AWS is the core platform. Working knowledge of Azure and GCP is needed for emergency support or maintenance.

Responsibilities

• Act as the cloud security subject matter expert for the information security organization, giving authoritative advice on public cloud security architecture and engineering.
• Identify cloud security risks across AWS, Azure and GCP, propose practical fixes, and lead or shape their implementation with engineering teams.
• Produce clear architecture and security design documents so the team can deliver solutions, whether built in-house or from third-party vendors.
• Work with product and platform engineers to design, review and validate secure network, compute, container and serverless architectures.
• Give hands-on IAM guidance, including writing and reviewing policies, so least-privilege access is applied consistently across cloud environments.
• Review cloud architectures and AI/ML workloads before deployment, advising developers on secure patterns, data protection, identity controls and security gaps.
• Engage with cloud providers to assess and influence security features, roadmap items and best-practice implementations.
• Assess cloud security vendors and tools, including CSPM and CNAPP platforms, run proof-of-value trials, and recommend options based on technical fit and risk reduction.
• Mentor junior cloud security team members through technical guidance, design reviews and knowledge sharing.
• Write and maintain cloud security documentation, including architecture standards, reference designs, configuration guidelines and operating processes.
• Work with senior leaders and cross-functional stakeholders to define current and future cloud security needs and align solutions with business and technology strategy.
• Keep up with emerging cloud threats, attack techniques and security tools, and apply that knowledge to strengthen the company's cloud security posture.

Requirements

• Bachelor's degree in computer science, information security or a related technical field, or equivalent practical experience with 6-8 years of strong experience.
• Solid hands-on knowledge of public cloud infrastructure and architecture, with a record of finding and reducing risk in decentralized, hybrid and multi-account environments.
• Sound understanding of information security principles, risk management and compliance frameworks as they apply to large public cloud platforms.
• Proven experience designing, building and securing AWS environments, plus meaningful hands-on work with Azure.
• Ability to automate security processes end to end and work with cloud engineering and product teams to build security into CI/CD pipelines and development workflows.
• Proficiency in at least one modern scripting or programming language, such as Python, Go or Node.js, for automation, tooling and integrations.
• Strong foundation in IP networking, including routing, VPNs, DNS and network segmentation in cloud environments.
• Hands-on experience in several of the following areas:
• Cloud security administration on AWS, Azure and/or GCP
• Designing and securing serverless applications and managed cloud services
• Infrastructure-as-Code tools such as Terraform, CloudFormation or Ansible
• Command-line tools such as Bash, PowerShell, AWS CLI and Azure CLI
• Containers and orchestration with Docker and Kubernetes
• Cloud network architecture and VPC/VNet engineering
• Cloud-native security services such as AWS GuardDuty, Azure Defender for Cloud, GCP Security Command Center and WAF
• Source control and pipeline security, such as GitHub Security features
• Excellent verbal and written communication, able to explain complex technical concepts to technical and non-technical audiences.
• Ability to manage several priorities and stay effective in an environment that moves quickly and changes often.
• Strong curiosity and commitment to continuous learning, staying current on cloud security threats, tools and best practices.
• Nice to have: one or more current cloud provider certifications showing advanced architecture and security knowledge, such as AWS Solutions Architect (Associate or Professional) or Security Specialty, Azure Fundamentals or Azure Solutions Architect Expert, or GCP Associate Cloud Engineer or Professional Cloud Security Engineer.
• Nice to have: industry-recognized security certifications such as CISSP or CompTIA Security+.
• Nice to have: hands-on experience with cloud security platforms, including CSPM and CNAPP tools such as Wiz, SIEM and observability tools such as Splunk, and cloud risk or asset management platforms such as Brinqa.
• Nice to have: experience connecting security tooling and workflows to collaboration platforms such as Slack and Jira, and to CI/CD pipelines.
• Nice to have: exposure to GCP.

Conditions

Hybrid role: you must work 3 days onsite from the DC or Silver Spring office.

Hiring salary range: $133,140.00 - $247,260.00 per year.

Actual pay depends on factors such as location, external market data, internal equity, skill set, experience, training, education and performance. Base pay is one part of total compensation.

Qualified candidates with disabilities can request adjustments or accommodations during the application and hiring process.

Benefits

• Annual bonuses, short- and long-term incentives, and program-specific awards.
• Health insurance, an employee wellness program, life and disability insurance, and a retirement savings plan.
• Paid holidays, sick time and vacation.