Cloud Security Architect
Indexed description
About The Role
As a Cloud Security Architect, you will define, designing, and assessing secure cloud architectures that align with organizational security strategy, risk management goals, and enterprise standards. You will translate business and technical requirements into secure cloud designs and architectures within Google Cloud Platform (GCP) environments, ensuring the integration of security controls across the full lifecycle of GCP-based solutions.
You will report to the Director Cybersecurity Operations and be located at Cranberry Township, PA. This is a hybrid position.
Key Responsibilities
- Develop and implement secure cloud architectures across GCP services, ensuring understanding of enterprise security standards, regulatory requirements, and risk tolerance.
- Define and document cloud security requirements and embed controls such as IAM, network segmentation, and encryption into architecture designs and cloud deployments.
- Establish and enforce centralized logging and monitoring capabilities (e.g., GCP logging, SIEM integration) to meet enterprise detection, audit, and forensic requirements.
- In collaboration with the Incident Response team, establish monitoring, alerting, and response capabilities integrated with enterprise incident response processes and guides for cloud environments.
- Lead integration and validation of endpoint protection (AV/EDR), vulnerability scanning, CSPM, and other security tools within GCP workloads.Design and implement a secure, best‑practice-driven container and Kubernetes framework, including full security lifecycle management.
- Support secure onboarding and monitoring of third-party providers, including MSSP access, ensuring appropriate controls, visibility, and compliance.
- Perform security assessments, threat modeling, and architecture reviews to identify gaps and recommend mitigations across cloud environments.
- Bachelor's degree in IT, related technical discipline, or equivalent experience.
- Minimum of 5+ years of experience in information technology
- 3+ years in cybersecurity, cloud security, or infrastructure security roles, and at least 1–2 years of hands-on experience designing or securing solutions in Google Cloud Platform (GCP) environments.
- Experience with GCP services such as IAM, VPC, Cloud Security Command Center, Cloud Logging, KMS, and Cloud Armor.
- Experience using architecture methodologies such as SABSA, Zachman and/or TOGAF.
- Experience implementing centralized logging, SIEM integration, and security monitoring solutions.
- Familiarity with vulnerability management, container/Kubernetes security (e.g., GKE), and endpoint protection (AV/EDR)Knowledge of infrastructure-as-code (Terraform) and DevSecOps practices.
Why Westinghouse?
Benefits
Our benefits package is tailored to meet the diverse needs of our employees, while also promoting wellness and career growth. The following are representative of what we offer:
- Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options
- Wellness Programs designed to support employees in maintaining their health and well-being including Employee Assistance Program providing support for our employees and their household members
- 401(k) with Company Match Contributions to support employees' retirement
- Paid Vacations and Company Holidays
- Opportunities for Flexible Work Arrangements to promote work-life balance
- Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers
- Global Recognition and Service Programs to celebrate employee accomplishments and service
- Employee Referral Program
- Safety and Quality
- Integrity and Trust
- Customer Focus and Innovation
- Speed and Passion to Win
- Teamwork and Accountability
Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities
Get connected with Westinghouse on social media: Twitter | Facebook | LinkedIn | YouTube
Create a free Caio profile to unlock more results and save your role and location preferences.
Unlock free search