Cloud Security Architect

Job Description: Cloud Security SME – CNAPP & Cloud ArchitectureHouston, TX & Juno Beach, FLContract - 12 Months W2 Contract Role SummarySenior security professional to design cloud security architecture, deploy and operationalize CNAPP platforms, and guide cross-functional teams across a multi-cloud enterprise environment.Key ResponsibilitiesDesign and implement cloud security architecture across AWS, GCP and AzureDeploy and manage CNAPP platforms (Upwind) including sensors, cloud collectors, CSPM policies, and RBAC/SSO configurationGovern S3 bucket security, IAM least-privilege models, and GCP security controlsIntegrate CNAPP with CrowdStrike, Tenable, and SIEM/SOAR toolingDrive vulnerability prioritization by correlating runtime context with scan findingsDefine and maintain RBAC frameworks and access governance workflows (e.g., ServiceNow)Mentor and guide VM, App Sec, SOC, and BU security teamsRequired Qualifications7+ years in cloud security; 3+ years in an SME or architecture roleHands-on Upwind, Wiz, or Prisma Cloud deployment experienceDeep expertise in AWS (IAM, GuardDuty, S3, CloudTrail) and GCP (SCC, VPC Service Controls)Strong CSPM and agentless/eBPF sensor deployment experienceFamiliarity with NERC CIP, NIST 800-53, or CIS compliance frameworksExperience producing executive-level architecture and governance documentationPreferredCertifications: CCSP, AWS Security Specialty, CISSPExposure to ServiceNow VRM, AI-assisted security workflows, or lab/POC environment buildouts