Platform Engineering - Cloud Security Architect

About the job

Red Hat’s Managed Services team is seeking an experienced and visionary Cloud Security Architect to shape and evolve our cloud security strategy. This role is ideal for someone with deep technical expertise, leadership experience, and a track record of building comprehensive cloud security programs from the ground up. You’ll influence the design of secure, scalable, and compliant cloud-native solutions, working closely with engineering, product, and security teams to raise the bar on security at Red Hat.

We’re looking for a leader who can drive security-first design across Kubernetes, OpenShift, AWS, Azure, and hybrid environments, as well as shape Red Hat’s security posture through automation, compliance, and proactive risk management. You’ll have the opportunity to lead complex security initiatives, mentor teams, and contribute to Red Hat’s growing reputation as a leader in cloud security.

If you are passionate about cloud security, automation, and open-source software, and thrive in a fast-paced, dynamic environment, this is the perfect team for you.

Location: Raleigh, NC preferred, but well-qualified North America remote candidates will also be considered.

What you will do

• Lead cloud security architecture for Red Hat’s managed services platforms, driving secure-by-default design and alignment with enterprise security standards, including CIS Benchmarks, FedRAMP, SOC2, and other frameworks

• Build and manage cloud security posture programs across AWS, GCP, Azure, and hybrid environments, leveraging automation for continuous compliance and risk management

• Collaborate with cross-functional teams (engineering, compliance, product, and infrastructure) to design and implement security solutions that mitigate risks, secure data, and meet regulatory requirements

• Serve as a thought leader in security, advising on best practices for cloud security, incident response, and secure development processes

• Drive adoption of best practices in threat modeling, risk mitigation, and security automation across the organization, including implementing guardrails, automated forensics, and security tooling

• Shape the security strategy for Red Hat’s hybrid cloud portfolio, contributing to long-term vision and the integration of security standards and controls

• Mentor and train teams on cloud-native security, ethical hacking techniques, and security automation, helping to cultivate a strong security culture within Red Hat

• Represent Red Hat in customer discussions, audits, and incident responses, ensuring security and compliance standards are clearly communicated

• Stay ahead of emerging threats, evolving regulations, and security innovations, ensuring Red Hat’s security posture remains resilient and agile

What you will bring

• Bachelor’s degree in computer science, cybersecurity, or a related field

• 10+ years of experience in software engineering, with expertise in cloud security and securing modern infrastructure at scale, preferably with platforms like Kubernetes, OpenShift, AWS, and Azure

• 8+ years of experience in enterprise cloud security, including experience leading cloud security posture management programs across multi-cloud environments

The following will be considered a plus:

• Certifications such as CISSP, CCSP, AWS Certified Security Specialty, GSE, GCIH, GCIA, or similar

• Previous involvement with security organizations and working groups (e.g., CSA, NIST, CNCF)

• Active involvement in security communities, with a proven ability to speak at conferences (e.g., RSA) or contribute to industry forums

• Background in ethical hacking, security research, or vulnerability assessments

• Proven experience building security automation tooling, implementing security guardrails, and managing compliance initiatives (e.g., FedRAMP, SOC2)

• 5+ years of experience with incident response, ethical hacking, and security operations in public cloud environments, including building automated forensics and response solutions

• Strong leadership skills, with experience managing teams, driving security best practices, and mentoring junior engineers

• Advanced knowledge of security frameworks (NIST, ISO 27001, CIS) and cloud platform security features (AWS, GCP, Azure)<