Cloud Security Architect at SailPoint

Job description

This is a US-based remote role. You will be required to interview in person. About SailPoint SailPoint is defining the next era of identity security. Our unified, AI-powered platform seamlessly secures both the Human Fabric of your workforce and the Agentic Fabric of AI and non-human identities, completely eliminating organizational blind spots. Built on core principles like zero-standing privilege and contextualized risk, our platform transforms identity from a vulnerability into a strategic business advantage. Today, we are trusted by some of the largest, most complex organizations in the world to deliver intelligent, autonomous identity security at scale. About the role SailPoint’s Cybersecurity organization is seeking a Cloud Security Architect with 5+ years of experience to design, implement, and govern secure cloud infrastructure across our organization. This position reports to the Director of Cyber Product Security (CPS) and the successful candidate will join a team of security engineers who collaborate with stakeholders across the organization. This role will govern the security architecture for our cloud environments (AWS/Azure/GCP), partner closely with Engineering, DevOps, and IT teams, and ensure our cloud posture meets both business needs and regulatory requirements. The ideal candidate combines deep technical expertise with the ability to translate security requirements into practical, scalable solutions. The Cloud Security Architect will have the opportunity to shape our future through process and technology optimization, capability acquisition and development, and maturation of our existing activities. They’ll already be comfortable with the 4 I’s at SailPoint (individual, Impact, Innovation, and Integrity) even if they’re new to the concept. They will embrace new challenges and will be a positive contributor to an already positive work culture and environment. Key Responsibilities · Design and implement secure cloud architecture patterns across IaaS, PaaS, and SaaS environments · Define and enforce cloud security standards, reference architectures, and guardrails (landing zones, network segmentation, identity boundaries) · Lead security reviews of new cloud initiatives, providing architecture guidance from design through deployment · Architect and oversee Identity and Access Management (IAM) strategies, including least-privilege access, federation, and role-based access control · Partner with other teams in Cyber like VM to evaluate and implement cloud-native and third-party security tools (CSPM, CWPP, CIEM, SIEM/SOAR integrations) · Partner with DevOps/Platform teams to embed security into CI/CD pipelines (DevSecOps, Infrastructure as Code security scanning) · Conduct threat modeling and risk assessments for cloud workloads and services · Ensure compliance with relevant frameworks (SOC 2, ISO 27001, NIST, CIS Benchmarks as applicable) · Develop and maintain documentation, runbooks, and architecture diagrams for cloud security controls · Mentor engineering teams on secure cloud design principles and serve as a security subject-matter expert · Stay current on emerging cloud threats, vulnerabilities, and vendor security capabilities Required Qualifications · 5+ years of experience in cloud security, security architecture, or related infrastructure security roles · Mandatory - Demonstrated hands-on experience securing workloads in AWS, Azure, and/or GCP · Strong understanding of IAM, network security, encryption, and key management in cloud environments · Experience with cloud security tooling (e.g., AWS Security Hub, Azure Defender, Prisma Cloud, Wiz, Orca Security, or similar CSPM/CWPP platforms) · Demonstrable experience with container and Kubernetes security · Working knowledge of compliance frameworks (SOC 2, ISO 27001, NIST 800-53, CIS Benchmarks) · Experience with Infrastructure as Code and integrating security into CI/CD pipelines · Relevant certifications preferred: CCSP, AWS Certified Security - Specia