Cloud Security Architect

To get the best candidate experience, please consider applying for a maximum of 3 roles within 12 months to ensure you are not duplicating efforts.

Job Category

Software Engineering

Job Details

About Salesforce

We’re Salesforce, the Customer Company, inspiring the future of business with AI+ Data +CRM. Leading with our core values, we help companies across every industry blaze new trails and connect with customers in a whole new way. And, we empower you to be a Trailblazer, too — driving your performance and career growth, charting new paths, and improving the state of the world. If you believe in business as the greatest platform for change and in companies doing well and doing good – you’ve come to the right place.

A key leader, the Cloud Security Architect will drive the security related efforts related to design, implementation, and maintenance of secure cloud environments leveraging cloud-native services and security tooling for proactive risk reduction on GCP and other environments. This role requires deep expertise in public cloud security principles, best practices, and cutting-edge technologies to define security baselines, enforce policies, and embed security into public cloud architectures. The architect will champion secure adoption, ensure parity across cloud environments, proactively mitigate risks, and serve as a subject matter expert for partners and stakeholders on cloud-native security.

Responsibilities:

• Security Solution Architecture:

  • Drive the architecture of robust and scalable security solutions for public cloud environments, utilizing guardrails, policies, and industry-leading practices.

• Security Baselines and Standards:

  • Define and maintain comprehensive security baseline requirements, policies, and standards for public cloud platforms (e.g., AWS, Azure, GCP).

• Security Control Implementation and Automation:

  • Lead the design, implementation, and automation of security controls in public cloud environments, including:

    • IAM (Identity and Access Management)

    • Detection and Monitoring

    • CI/CD Security

    • Configuration Management

    • Container Security

    • Network Security

    • Data Protection

  • Utilize Infrastructure as Code (IaC) tools like Terraform and container orchestration platforms like Kubernetes to automate security configurations and ensure infrastructure is secure by design.

• Cross-Functional Collaboration:

  • Collaborate effectively with cross-functional teams, such as Product Engineering and internal Security teams (CSOC, Enterprise Security, Compliance, others), to seamlessly integrate security solutions, tooling, and risk mitigation strategies into the architecture of public cloud environments.

• Threat Landscape and Trend Analysis:

  • Continuously assess emerging trends in the cybersecurity landscape, including new threats, vulnerabilities, and technologies, to proactively evolve security policies, practices, and architectural patterns.

• Cloud Security Vision and Strategy:

  • Partner with key stakeholders to develop, communicate, and drive a converged cloud security vision and strategy across all public cloud environments, ensuring security parity and a consistent security posture.

• Architecture Reviews and Guidance:

  • Conduct periodic security architecture reviews to identify potential vulnerabilities, assess the effectiveness of existing controls, and provide actionable recommendations for improvement.

  • Serve as a subject matter expert, providing expert guidance and consultation to partners and stakeholders on secure architecture patterns and best practices for developing and deploying cloud-native applications and services.

• Secure Architecture Adoption and Advocacy:

  • Drive the adoption of secure cloud architecture principles, patterns, and services across the organization, promoting a "security by design" mindset.

• Proactive Risk Management:

  • Partner closely with the Security Assessments team to proactively identify, prioritize, and mitigate security risks across public cloud environments, contributing to a continuous risk reduction program.