Cloud Security Architect

In this role, the person Cloud Security Architect will be responsible for designing, implementing, and governing secure cloud architectures across enterprise environments, ensuring confidentiality, integrity, and availability of data and systems, while aligning cloud security strategies with corporate standards, regulatory requirements, and business objectives.

Main activities:

• Design and implement secure enterprise cloud architectures aligned with industry standards and security frameworks;

• Develop and maintain cloud security reference architectures and design patterns for enterprise workloads;

• Design secure enterprise networks and data transfer mechanisms across cloud platforms with encryption and segmentation;

• Implement and manage cloud security controls, including cloud security posture management capabilities;

• Architect and operationalize cloud-native security services for continuous monitoring and risk assessment;

• Drive remediation processes for cloud misconfigurations, compliance gaps, and security posture risks;

• Design identity-first security architectures, including access control, authentication, and authorization models;

• Align cloud security architecture with regulatory, compliance, and audit requirements.

We expect you to have:

• Hands-on knowledge of cloud platforms such as Microsoft Azure and AWS;

• Knowledge of cloud security posture management and cloud-native security tools;

• Understanding of identity and access management concepts and identity-based security architectures;

• Knowledge of networking, encryption, authentication, and authorization mechanisms in cloud environments;

• Familiarity with security frameworks and standards such as NIST, ISO 27001/27002, and CIS benchmarks;

• Bachelor’s degree completed in a technology-related field or equivalent;

• Advanced English proficiency;

• Availability to work onsite in Betim (MG), Brazil.

It will be considered a plus if you have:

• Knowledge of security information and event management platforms for centralized monitoring;

• Familiarity with key management and encryption services in cloud environments;

• Exposure to regulatory compliance monitoring in cloud platforms;

• Security-related cloud certifications.