Note: The job is a remote job and is open to candidates in USA. Acuity Inc. is a market-leading industrial technology company that designs and manufactures innovative products and services. They are seeking a highly experienced Security Architect to lead the design and implementation of secure architectures across cloud-native platforms, connected products, and enterprise applications.
Responsibilities
- Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms
- Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework, including their use for posture management, workload protection, and identity risk analysis. Own and drive Cloud-Native Application Protection Platform (CNAPP) capabilities, including:
- CSPM (posture management and misconfiguration detection)
- CWPP (runtime protection for VMs, containers, serverless)
- CIEM (identity entitlement and least privilege enforcement)
- Kubernetes and container security (AKS, image hardening, runtime controls)
- Experience defining and enforcing cloud security guardrails, landing zone controls, and policy-as-code frameworks
- Define and enforce cloud security baselines, guardrails, and landing zone standards
- Assess and secure:
- AKS/Kubernetes environments
- Infrastructure-as-Code (Terraform, ARM, Bicep)
- Service-to-service and API communication patterns
- Integrate security controls into CI/CD pipelines, enabling both shift-left and runtime security
- Drive adoption of:
- SAST, DAST, SCA Toolchain
- Container and IaC scanning
- Policy-as-code for scalable enforcement
- Define and maintain cloud security standards, patterns, and reusable controls
- Drive continuous improvement in security posture and maturity across development teams
- Influence cross-functional teams to adopt secure-by-design and Zero Trust principles
Skills
- Bachelor of Science in Computer Science or Information Technology
- Strong expertise in cloud security (Azure-first), CNAPP, and modern DevSecOps practices
- Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms
- Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework, including their use for posture management, workload protection, and identity risk analysis
- Own and drive Cloud-Native Application Protection Platform (CNAPP) capabilities, including CSPM (posture management and misconfiguration detection), CWPP (runtime protection for VMs, containers, serverless), CIEM (identity entitlement and least privilege enforcement), Kubernetes and container security (AKS, image hardening, runtime controls)
- Experience defining and enforcing cloud security guardrails, landing zone controls, and policy-as-code frameworks
- Define and enforce cloud security baselines, guardrails, and landing zone standards
- Assess and secure AKS/Kubernetes environments, Infrastructure-as-Code (Terraform, ARM, Bicep), Service-to-service and API communication patterns
- Integrate security controls into CI/CD pipelines, enabling both shift-left and runtime security
- Drive adoption of SAST, DAST, SCA Toolchain, Container and IaC scanning, Policy-as-code for scalable enforcement
- Define and maintain cloud security standards, patterns, and reusable controls
- Drive continuous improvement in security posture and maturity across development teams
- Influence cross-functional teams to adopt secure-by-design and Zero Trust principles
- Effectively document and communicate security assessment findings, recommendations, and remediation strategies to a diverse audience, including technical teams and non-technical business stakeholders, ensuring clarity and actionable guidance for all parties involved
- Demonstrable ability to analyze business direction and problems, understand long term vision and risk in developing strategic technical solutions
- Azure Security Certifications are a plus
Company Overview