Cloud Security Architect with AI

We are seeking a Cloud Security Architect with AI to design and strengthen security architectures across cloud, hybrid and on-premises environments, while leveraging AI-assisted tools to enhance security operations, risk analysis and automation. This role partners closely with engineering, infrastructure, compliance and security operations teams to embed security into cloud solutions from design through implementation.

Responsibilities Design and implement security architectures and controls across cloud, hybrid and on-premises environments, with a primary focus on cloud security Gather business, technical and compliance requirements to design secure cloud solutions for new implementations, migrations and security improvements Define and improve cloud security capabilities, including IAM, network security, data protection, workload security, logging, monitoring and governance Design and improve Cloud Security Posture Management (CSPM) capabilities, including misconfiguration detection, compliance monitoring, risk prioritization and remediation Conduct security architecture reviews, threat modeling and risk assessments for cloud infrastructure, applications and integrations Develop cloud security reference architectures, security standards, configuration baselines and secure design patterns Evaluate cloud security technologies, including CSPM, CNAPP, cloud-native security services and security automation solutions Collaborate with cloud engineering, infrastructure, development, security operations, IAM, AppSec and compliance teams to integrate security into cloud solutions Support security automation using Terraform, PowerShell, Python, REST APIs or similar technologies Apply AI-assisted tools and workflows to improve cloud security activities, including configuration and vulnerability analysis, risk assessment and remediation recommendations, policy and compliance analysis, scripting, reporting and documentation, and repetitive task automation Identify opportunities for AI-assisted security automation while ensuring appropriate validation, data protection and human oversight Communicate security risks, architectural decisions and remediation plans to stakeholders and security leadership Requirements Bachelor's degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience 5+ years of information security experience, with a focus on security architecture and design Experience delivering or significantly contributing to cloud security architecture, implementation or modernization projects Expertise in at least one major cloud platform (Azure, AWS or GCP) and its native security services and controls Understanding of cloud security architecture, including IAM, network segmentation, encryption, key management, workload protection, logging and monitoring Practical experience with Cloud Security Posture Management (CSPM), cloud security assessments, configuration reviews and risk remediation Familiarity with cloud security tools such as Microsoft Defender for Cloud, AWS Security Hub, Google Security Command Center, Wiz or Prisma Cloud Knowledge of related security domains, including IAM, network security, application security, data protection and security operations Understanding of security architecture principles and frameworks such as Zero Trust, NIST, ISO 27001 or CIS Benchmarks Familiarity with Infrastructure as Code, scripting and cloud security automation Intermediate practical experience with AI-assisted tools and automation, including using AI for security analysis, troubleshooting and technical research, structured prompting for technical tasks, generating and validating scripts, queries and documentation with AI, and configuring AI-assisted workflows or integrations Understanding of safe AI usage, including data protection, access control and validation of AI-generated outputs, with willingness to further develop AI automation skills Strong communication and collaboration skills, with hands-on technical proficiency Nice to have Experience with multiple cloud platforms, hybrid or multi-cloud security architectures Experience with CNAPP, CWPP, CIEM, cloud governance and policy-as-code solutions Experience with Terraform, CloudFormation, Bicep, Python or PowerShell automation technologies Experience with Kubernetes, container security, DevSecOps or CI/CD security Experience integrating cloud security solutions with SIEM/SOAR platforms Experience with AI automation, AI agents, Microsoft Copilot Studio, Azure OpenAI, Amazon Bedrock or Power Automate Understanding of AI security risks, including prompt injection, data leakage and insecure tool usage Security or cloud certifications such as CISSP, CISM, CCSP, CCSK, SC-100, AZ-500, AWS Security Specialty or Google Professional Cloud Security Engineer AI-related certifications such as AI-900, Claude Certified Architect or AWS Certified AI Practitioner Georgia (Production) We connect like-minded people Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers We cover it all Participation in the Employee Stock Purchase Plan Monetary bonuses for engaging in the referral program Comprehensive medical & family care package Five trust days per year (sick leave without a medical certificate) Benefits package (sports activities, a variety of stores and services) Kazakhstan (Prod) We connect like-minded people: Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth: Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers Discounts in local language schools, including online courses for the Kazakh language We cover it all: Participation in the Employee Stock Purchase Plan Monetary bonuses for engaging in the referral program Medical & family care package Six trust days per year (sick leave without a medical certificate) Coverage of psychology sessions of your choice Benefits package (sports activities, a variety of stores and services) Housing support program: preferential mortgage access via Otbasy Bank partnership Uzbekistan (Prod) We connect like-minded people: Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth: Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers Discounts in local language schools, including offline courses for the Uzbek language We cover it all: Monetary bonuses for engaging in the referral program Medical & family care package Four trust days per year (sick leave without a medical certificate) Discounts for fitness clubs, dance schools and sports programs Benefits package (sports activities, a variety of stores and services) Armenia (Prod) We connect like-minded people Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers We cover it all Participation in the Employee Stock Purchase Plan Monetary bonuses for engaging in the referral program Comprehensive medical & family care package Four trust days per year for personal needs Discounts for fitness clubs Benefits package (hotels, restaurants, stores and services) Kyrgyzstan (Prod) We connect like-minded people: Delivering innovative solutions to industry leaders, making a global impact Enjoyable working environment, whether it is the vibrant office or the comfort of your own home Opportunity to work abroad for up to two months per year Relocation opportunities within our offices in 55+ countries Corporate and social events We invest in your growth: Leadership development, career advising, soft skills and well-being programs Certifications, including GCP, Azure and AWS Unlimited access to EPAM's internal learning database Free English classes with certified teachers We cover it all: Monetary bonuses for engaging in the referral program Medical & family care package Six trust days per year (sick leave without a medical certificate) Coverage of psychology sessions of your choice Discounts for fitness clubs and sports programs Benefits package (sports activities, a variety of stores and services)