Cloud Security Architect

The role

The Cloud Security Architect leads the design, implementation, and governance of cloud security architecture across the firm's hybrid infrastructure. This person will architect security controls, define Zero Trust principles, and manage cloud security posture across multi-cloud environments.

What you will do

• Architecting and supporting implementation of complex security controls across multi-cloud environments
• Define and implement Zero Trust principles, cloud security standards, and reference architectures
• Lead the design of secure landing zones, guardrails, and multi-cloud governance frameworks
• Partner with engineering teams to embed security into application and infrastructure designs
• Architect identity and access strategies across various cloud solutions
• Design secure network architectures including segmentation, private connectivity, and cloud-native firewalls
• Conduct threat modeling, architecture reviews, and risk assessments
• Drive continuous improvement of cloud security posture through automation and monitoring
• Automate cloud security controls using Terraform, Python, PowerShell, and policy-as-code frameworks
• Provide technical guidance and mentorship to engineers and cross-functional teams

Required qualifications

• Deep expertise of cybersecurity, cloud architecture (Azure, AWS, GCP), and associated security services
• Experience with regulatory frameworks and standards (SOC2, GLBA, HIPAA, GDPR)
• Knowledgeable in DevSecOps practices and infrastructure-as-code tools
• Firsthand experience with Terraform, Bicep, CI/CD pipelines, and cloud security automation
• Effective communication skills
• Proven ability to lead complex security initiatives and drive cross-team collaboration
• Commitment to continuous learning and staying current with emerging cloud threats and technologies
• Bachelor’s degree in Computer Science, Information Systems, or related field
• Cloud architecture and security certifications (e.g., CCSP, GIAC GCSA, CISSP, Azure-AZ-305, Azure-SC-100, GCP-PCA, GCP-PCSE, AWS-SA-Pro, AWS-Sec-Spec)
• Minimum 15 years of experience in information security
• 10+ years focused on cloud security and architecture

Benefits

• health care
• retirement benefits
• paid days off, including sick time, and vacation time
• parental leave
• basic life insurance
• Flexible Spending Accounts
• discretionary, performance-based bonuses

About the company

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes.