What are the responsibilities and job description for the Cloud Security Architect position at System One?
For immediate consideration, please connect with me on LinkedIn at https://www.linkedin.com/in/dpotapenko and then email me your resume, work authorization status, current location, availability, and W2 compensation expectations directly to denis.potapenko@systemone.com - make sure to include the exact job title and job location in your email message.
*** no C2C with 3rd parties - W2 candidates only
*** Must be able to work on site 5 days a week - no remote work
Cloud Security Architect
- Lead security architecture and threat modeling for complex enterprise applications, with a strong focus on AI and agentic AI solutions.
- Evaluate applications, APIs, cloud platforms, SaaS solutions, and distributed systems to identify security risks and define effective controls.
- Work with product owners, enterprise architecture, engineering, and security teams to protect sensitive data, strengthen identity and access controls, secure cloud environments, and support compliance with enterprise policies and industry standards.
Qualifications:
- Strong AWS expertise and the ability to lead multiple security initiatives across IaaS, SaaS, and internally developed applications.
- Extensive experience with security architecture and threat modeling for complex enterprise applications
- Strong knowledge of STRIDE, attack trees, abuse cases, data flow analysis, and trust boundary analysis
- Hands on experience evaluating security risks in AI, machine learning, and agentic AI applications
- Advanced AWS knowledge across IAM, networking, compute, storage, RDS, messaging, serverless, ECS/EKS, CI/CD, and AI/ML services
- Strong understanding of application security, API security, IAM, authentication, authorization, encryption, key management, and data protection
- Experience translating identified threats into practical security controls and remediation recommendations
- Knowledge of DevSecOps, pipeline security, container security, infrastructure security, SIEM, CSPM, and CWPP solutions
- Familiarity with security frameworks and standards such as NIST, OWASP, CIS, FedRAMP, ISO, and SOX
- Experience with resilient, highly available, API driven, stateless, and integrated cloud or SaaS environments
- Ability to lead multiple initiatives and communicate effectively with technical and business stakeholders
- Preferred certifications include CISSP, CCSP, AWS Professional or Specialty certifications, or equivalent credentials
For immediate consideration, please connect with me on LinkedIn at https://www.linkedin.com/in/dpotapenko and then email me your resume, work authorization status, current location, availability, and W2 compensation expectations directly to denis.potapenko@systemone.com - make sure to include the exact job title and job location in your email message.
.
#M1
#LI-DP1
.
Ref: #404-IT Pittsburgh