Senior Cloud Security Architect / Cloud Security Automation Engineer JY Legner Associates - 3.5 Louisville, KY Job Details Full-time | Contract $95 - $105 an hour 21 hours ago Benefits Health insurance Dental insurance 401(k) Paid time off Vision insurance 401(k) matching Life insurance Qualifications Cloud identity and access management (IAM) DevSecOps Practices Continuous Delivery (CD) implementation Infrastructure as Code (IaC) DevOps Infrastructure architecture design Network architecture Cloud Architecture Design (Architecture design skills) Cloud automation DevOps automation Cloud monitoring Python PowerShell Identity & access management Full Job Description Senior Cloud Security Architect /

Cloud Security Automation Engineer Employment Type:

12-Month Contract (potential for extention)

Schedule:

Hybrid -

In Office Tuesday, Wednesday & Thursday Locations:

Louisville, KY | Allentown, PA | Cumberland, RI Position Overview We are seeking a highly experienced Cloud Security Architect / Cloud Security Automation Engineer to join a Cybersecurity organization supporting a large enterprise cloud environment. This is a hands-on technical role for someone who can do more than assess cloud security risks and recommend solutions. The ideal candidate will have direct experience using Wiz Cloud Security and developing automation to remediate security and configuration issues within cloud environments, particularly Microsoft Azure. This individual will work closely with Cloud Engineering, Cybersecurity, DevOps, and development teams to identify cloud security risks, develop secure architecture and automation, and establish scalable security patterns. Hands-on Wiz experience is required for this position. What You'll Do Use Wiz Cloud Security to identify, monitor, and address security risks and cloud configuration issues. Develop and implement Azure cloud security automation in conjunction with Wiz. Create and support Infrastructure as Code (IaC) automation and security controls. Develop automation using technologies such as Python, PowerShell, Azure CLI, and IaC tools . Work with DevOps toolchains and CI/CD pipelines , including automation executed through Wiz and/or GitHub. Design and implement secure cloud architecture across Azure, AWS, and GCP . Review cloud infrastructure, applications, and architecture to identify vulnerabilities, configuration gaps, and security risks. Develop remediation strategies and help automate security fixes where appropriate. Support Cloud Security Posture Management (CSPM) and container security technologies. Ensure cloud identity, access, and privileged accounts follow security best practices. Support cloud incident response and security exercises. Partner with developers and DevOps teams to incorporate security into application and infrastructure deployments. Support cloud security standards and frameworks, including NIST and CIS . Provide technical guidance on cloud security best practices, emerging threats, and secure cloud architecture. Help establish repeatable security and automation patterns that can scale across engineering teams. Mentor and provide technical guidance to junior team members. Required Qualifications 10+ years of experience in cybersecurity, cloud security, cloud infrastructure, security automation, or a closely related area. Hands-on experience with Wiz Cloud Security. Strong hands-on experience with Microsoft Azure and Azure security. Experience developing cloud automation and/or security remediation automation. Hands-on experience with Infrastructure as Code (IaC) . Experience with scripting or automation technologies such as Python, PowerShell, or Azure CLI . Experience with DevOps and CI/CD pipelines supporting infrastructure or application deployments. Strong understanding of cloud architecture, including virtual machines, containers, Kubernetes, serverless technologies, networking, and Infrastructure as Code. Experience with Azure technologies such as Entra ID/Azure Active Directory, MFA, Azure Functions, VNETs, Network Security Groups, Key Vault, firewalls, Management Groups, Resource Groups, and Azure networking. Experience with Microsoft cloud security technologies such as Microsoft Defender for Cloud . Understanding of identity and access management (IAM) and privileged access within cloud environments. Experience assessing security risks and vulnerabilities in complex cloud environments. Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent relevant experience. Preferred Qualifications Experience with multiple cloud platforms, including AWS and/or GCP in addition to Azure. Experience with CSPM and container security technologies. Programming experience with Python, .NET, or Java. Experience with Microsoft Intune/Endpoint Manager. Experience with Microsoft 365 identity and security technologies. Knowledge of NIST and CIS security frameworks.

Microsoft certifications such as:

Azure Administrator Associate (AZ-104) Azure Security Engineer Associate (AZ-500) Azure Network Engineer Associate Microsoft 365 Security certifications Work Location / Hybrid Requirements This is a hybrid position requiring in-office attendance Tuesday, Wednesday, and Thursday. Candidates must reside within the applicable service area and be able to report to one of the following locations based on their residence:

Kentucky:

220 W. Main St., Louisville, KY 40202

Pennsylvania:

645 Hamilton St., Allentown, PA 18101

Rhode Island:

1595 Mendon Road, Cumberland, RI 02864

Pay:

$95.00 - $105.00 per hour

Benefits:

401(k) 401(k) matching Dental insurance Health insurance Life insurance Paid time off Vision insurance Application Question(s): Which of the following have you personally used in a production environment?

Wiz / Microsoft

Azure / Python / PowerShell / Azure CLI / Infrastructure as Code (IaC) / CI/CD pipelines / GitHub / AWS / GCP? Please list. Please briefly describe an example where you personally automated the remediation or correction of a cloud security or configuration issue. What tools did you use?

Experience:

WIZ Cloud Security:

1 year (Required)

Python:

3 years (Preferred)

PowerShell:

5 years (Preferred) cybersecurity/ cloud security/ automation: 10 years (Preferred) cloud security and automation: 8 years (Required)

Work Location:

Hybrid remote in Louisville, KY 40202