Cloud Security Architect

Location: United States; remote role with an in-person interview required.

Salary: $174,200–$293,702 base salary annually for US-based employees; compensation varies by employment location and may include a bonus, commission, or equity.

Company

hirify.global provides an AI-powered identity security platform for human and non-human identities, focused on zero-standing privilege, contextualized risk, and enterprise-scale security.

What you will do

• Design and implement secure cloud architecture patterns across IaaS, PaaS, and SaaS environments.
• Define cloud security standards, reference architectures, landing zones, network segmentation, identity boundaries, and guardrails.
• Lead security reviews for cloud initiatives from design through deployment and partner with Engineering, DevOps, IT, and Cyber teams.
• Architect IAM strategies covering least privilege, federation, and role-based access control.
• Evaluate and implement CSPM, CWPP, CIEM, SIEM/SOAR, container, Kubernetes, and other cloud security capabilities.
• Integrate security into CI/CD pipelines, conduct threat modeling and risk assessments, maintain documentation and runbooks, mentor engineering teams, and drive measurable cloud risk reduction.

Requirements

• 5+ years of experience in cloud security, security architecture, or related infrastructure security roles.
• Hands-on experience securing workloads in AWS, Azure, and/or GCP.
• Strong understanding of IAM, network security, encryption, and key management in cloud environments.
• Experience with cloud security tooling such as AWS Security Hub, Azure Defender, Prisma Cloud, Wiz, Orca Security, or similar CSPM/CWPP platforms.
• Demonstrable experience with container and Kubernetes security.
• Working knowledge of SOC 2, ISO 27001, NIST 800-53, and CIS Benchmarks.
• Experience with Infrastructure as Code and integrating security into CI/CD pipelines.
• Strong hands-on experience with at least one major cloud provider; knowledge of multi-cloud concepts is a plus.
• Ability to design defense-in-depth architectures, assess risk, perform threat modeling and attack path analysis, explain complex concepts to technical and non-technical stakeholders, collaborate cross-functionally, adapt to changing environments, and influence without direct authority.

Nice to have

• CCSP, AWS Certified Security – Specialty, Azure Security Engineer, or Google Professional Cloud Security Engineer certification.
• Knowledge of multi-cloud concepts.
• Experience with Terraform, CloudFormation, ARM/Bicep, Python, Bash, or PowerShell.

Culture & Benefits

• Remote-first work culture with autonomy, trust, flexibility, and work-life balance.
• Collaborative and inclusive environment with transparent leadership.
• Flexible time off, paid company holidays, and sick leave.
• Medical, dental, vision, disability, life, AD&D, HSA, and flexible spending account benefits.
• 401(k) plan with company matching, paid parental leave, employee assistance, and optional legal, critical illness, accident, hospital indemnity, and pet insurance.
• Career growth opportunities; the role may include bonus or commission eligibility and potential equity participation.