Lead Cloud Information Security Architect

About Lumen

Lumen connects the world. We are igniting business growth by connecting people, data and applications – quickly, securely, and effortlessly. Together, we are building a culture and company from the people up – committed to teamwork, trust and transparency. People power progress.

We’re looking for top-tier talent and offer the flexibility you need to thrive and deliver lasting impact. Join us as we digitally connect the world and shape the future.

The Role

The Lead Cloud / Data Information Security Architect within the Global Security Services organization is responsible for conducting security risk assessments specifically targeting cloud infrastructures in coordination with the Lumen business owners, the Governance, Risk, and Compliance team, and the Product and Platform Security team. The purpose is to ensure compliance with corporate policy, standards, procedures, and industry best practices. The deliverables include metrics, reports, and mitigations associated with potential findings, issues, and risks that could impact Lumen or its customers. 

The successful candidate will have extensive technical knowledge of current and emerging cloud-related cyber threats, as well as security technologies and methods used to protect corporate and customer-facing cloud infrastructures. This candidate must be able to work independently and as a team leader to consult with internal clients on security topics, providing designs, reviews, and recommendations. 

Location

This position is work from home anywhere within the US. 

The Main Responsibilities

• Conduct assessments of potential risks specifically targeting cloud infrastructures, including applications, databases, and provide security requirements and recommendations for risk mitigation related to cloud security. 
• Develop and design new cloud security solutions that reduce risk and align business requirements with security standards, especially focusing on cloud-based protections. 
• Support vendor relationships; lead vendor reviews through RFx process, working with Procurement and appropriate business partners on cloud security requirements and success criteria. 
• Consult as a cloud security subject matter expert with architects, engineers, third parties, and others on potential solutions. 
• Recommend new cloud-oriented information security systems and controls to mitigate emerging threats and risks across the company's cloud infrastructure. 
• Ensure reports and findings on cloud security are delivered in a timely and appropriate manner to management, operations, and executive leadership. 
• Recommend new cloud security policy, standards, best practices, and system configuration standards. Consult with internal clients on cloud security topics and policy interpretation. 
• Coordinate activities across multiple departments and business units, emphasizing cloud security principles and practices. 
• Stay up-to-date with emerging security trends, vulnerabilities, and best practices, and recommend adjustments to security strategies as needed.  

What We Look For in a Candidate

• 7+ years of relevant experience, including threat modeling, security design reviews, and security architecture
• Knowledge of cloud platforms (e.g., AWS, Azure, Oracle, GCP) and their security features and controls.
• Experience with API security, including authentication, authorization, and protection against common API vulnerabilities.
• Familiarity with Web Application Firewall (WAF) solutions and their configuration for application protection.
• Strong understanding of security principles, encryption techniques, network security, and authentication protocols.
• Excellent communication skills and the ability to collaborate effectively with technical and non-technical stakeholders.
• Strong problem-solving skills and the ability to analyze complex security issues and recommend appropriate solutions.
• Experience with security architecture and deployment models.
• Experience with securing highly sensitive data. 
• Demonstrate knowledge of security technologies, trends, leading practices, and regulatory requirements and government security standards such as FedRAMP and Controll