Note: The job is a remote job and is open to candidates in USA. SailPoint is seeking a Cloud Security Architect to design, implement, and govern secure cloud infrastructure across its organization. The role partners with Engineering, DevOps, and IT to guide cloud security architecture, manage security risks and compliance, and embed security practices into cloud development and operations.
Responsibilities
- Design and implement secure cloud architecture patterns across IaaS, PaaS, and SaaS environments
- Define and enforce cloud security standards, reference architectures, and guardrails (landing zones, network segmentation, identity boundaries)
- Lead security reviews of new cloud initiatives, providing architecture guidance from design through deployment
- Architect and oversee Identity and Access Management (IAM) strategies, including least-privilege access, federation, and role-based access control
- Partner with other teams in Cyber like VM to evaluate and implement cloud-native and third-party security tools (CSPM, CWPP, CIEM, SIEM/SOAR integrations)
- Partner with DevOps/Platform teams to embed security into CI/CD pipelines (DevSecOps, Infrastructure as Code security scanning)
- Conduct threat modeling and risk assessments for cloud workloads and services
- Ensure compliance with relevant frameworks (SOC 2, ISO 27001, NIST, CIS Benchmarks as applicable)
- Develop and maintain documentation, runbooks, and architecture diagrams for cloud security controls
- Mentor engineering teams on secure cloud design principles and serve as a security subject-matter expert
- Stay current on emerging cloud threats, vulnerabilities, and vendor security capabilities
Skills
- 5+ years of experience in cloud security, security architecture, or related infrastructure security roles
- Demonstrated hands-on experience securing workloads in AWS, Azure, and/or GCP
- Strong understanding of IAM, network security, encryption, and key management in cloud environments
- Experience with cloud security tooling (e.g., AWS Security Hub, Azure Defender, Prisma Cloud, Wiz, Orca Security, or similar CSPM/CWPP platforms)
- Demonstrable experience with container and Kubernetes security
- Working knowledge of compliance frameworks (SOC 2, ISO 27001, NIST 800-53, CIS Benchmarks)
- Experience with Infrastructure as Code and integrating security into CI/CD pipelines
- Strong hands-on experience with at least one major cloud provider (AWS, Azure, or GCP)
- Ability to design defense-in-depth architectures balancing security, cost, and performance
- Comfort with Infrastructure as Code (Terraform, CloudFormation, ARM/Bicep) and scripting (Python, Bash, PowerShell)
- Ability to explain complex security concepts to both technical and non-technical stakeholders
- Track record of working cross-functionally with engineering and IT teams
- Strong risk assessment and threat modeling capabilities
- Comfortable operating in fast-changing environments with evolving cloud services and threat landscapes
- Prioritizing risk by analyzing how misconfigurations, vulnerabilities, and identity permissions combine into exploitable paths rather than treating each finding in isolation
- Ability to influence without direct authority and drive security best practices across teams
- CCSP, AWS Certified Security - Specialty, Azure Security Engineer, or Google Professional Cloud Security Engineer
- Working knowledge of multi-cloud concepts is a plus
Benefits
- Flexible, remote-first work culture that prioritizes personal autonomy, trust, and work-life balance.
- A highly collaborative and inclusive environment where leadership is transparent and crew members have the freedom to drive real impact in security.
- Flexible Time Off: Trust-based vacation policies alongside paid company holidays.
- Premium medical, dental, and vision insurance options.
- Career Growth Opportunities.
- This role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission.
- Potential eligibility for equity participation.
- Short-term and long-term disability coverage.
- Life insurance and Accidental Death & Dismemberment (AD&D).
- Supplemental life insurance for employees, spouses, and children.
- Flexible spending accounts for health care and dependent care; limited purpose flexible spending account.
- 401(k) Savings and Investment Plan with company matching.
- 8 paid holidays annually.
- Sick leave.
- Paid parental leave.
- Employee Assistance Program (EAP) and Care Counselors.
- Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options.
- Health Savings Account (HSA) with employer contribution.
Company Overview
Company H1B Sponsorship