RiseMe
Gibson Dunn logo
Gibson Dunn Verified
Legal Services, Law Firm

Cloud Security Architect

CenturyOnsiteFull Time$190,000–$230,000 /yrPosted 17 days ago

Is this role right for you?

Upload your resume and get a skill-by-skill breakdown — see exactly where you match, where you're close, and what to highlight. Not a mystery percentage.

Get a tailored resume highlighting what this role needs.

Required skills

  • Azure
  • AWS
  • GCP
  • SOC2
  • GLBA
  • HIPAA
  • GDPR
  • DevSecOps
  • Terraform
  • Bicep

Nice to have

  • CCSP
  • GIAC GCSA
  • CISSP
  • Azure-AZ-305
  • Azure-SC-100
  • GCP-PCA

Role summary

Gibson Dunn, a global law firm, seeks a Cloud Security Architect to lead cloud security initiatives within its InfoSec team. This role involves designing, implementing, and governing cloud security architecture across hybrid environments, ensuring compliance with security policies and industry best practices. Responsibilities include architecting security controls in multi-cloud settings (Azure, AWS, GCP), defining Zero Trust principles, designing secure landing zones, and architecting identity and network security strategies. The architect will also conduct threat modeling, risk assessments, and drive continuous improvement of cloud security posture through automation and monitoring, collaborating with various technical and compliance stakeholders.

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high-stakes. The firm’s work is distinguished by a unique combination of precision and vision.

Based in any U.S. Office, the Cloud Security Architect plays a critical role in the InfoSec team, leading the design, implementation, and governance of cloud security architecture across the firm’s hybrid infrastructure. This position ensures compliance with Information Security and IS policies while aligning with industry best practices for cloud security.

This role reports to the Senior Director Information Security Engineering and collaborates closely with the IT Architect, Cloud Administrators, and senior leadership on cloud operations. The Cloud Security Architect will interface with technical teams, legal and compliance stakeholders, external auditors, and cloud service providers.

Responsibilities include:

  • Architecting and supporting implementation of complex security controls across multi-cloud environments (e.g., Azure, AWS, GCP).
  • Define and implement Zero Trust principles, cloud security standards, and reference architectures.
  • Lead the design of secure landing zones, guardrails, and multi-cloud governance frameworks.
  • Partner with engineering teams to embed security into application and infrastructure designs.
  • Architect identity and access strategies across various cloud solutions
  • Design secure network architectures including segmentation, private connectivity, and cloud-native firewalls.
  • Conduct threat modeling, architecture reviews, and risk assessments of cloud-based infrastructure, applications, and services.
  • Drive continuous improvement of cloud security posture through automation and monitoring.
  • Reviewing cloud architecture and configurations to validate security posture and data protection.
  • Leading threat modeling, risk assessments, and vulnerability management for cloud-native services.
  • Administering cloud security testing, including penetration testing, misconfiguration audits, and incident simulations.
  • Collaborating with DevOps and engineering teams to embed security into CI/CD pipelines and cloud deployments.
  • Automate cloud security controls using Terraform, Python, PowerShell, and policy-as-code frameworks.
  • Driving remediation of security findings and ensuring alignment with regulatory and compliance frameworks.
  • Leading security reviews of cloud perimeter defenses (e.g., WAFs, cloud-native firewalls, DDoS protection).
  • Managing cloud security controls and endpoint protection platforms (e.g., Defender for Cloud, CrowdStrike, Cloudflare, Proofpoint TAP).
  • Providing technical guidance and mentorship to engineers and cross-functional teams.
  • Developing and maintaining cloud security policies, playbooks, and documentation.

    • Qualifications:

  • Deep expertise of cybersecurity, cloud architecture (Azure, AWS, GCP), and associated security services.
  • Experience with regulatory frameworks and standards (SOC2, GLBA, HIPAA, GDPR).
  • Knowledgeable in DevSecOps practices and infrastructure-as-code tools
  • Firsthand experience with Terraform, Bicep, CI/CD pipelines, and cloud security automation.
  • Effective communication skills to engage technical and non-technical audiences.
  • Proven ability to lead complex security initiatives and drive cross-team collaboration.
  • Commitment to continuous learning and staying current with emerging cloud threats and technologies.

    • Experience:

  • Bachelor’s degree in Computer Science, Information Systems, or related field.
  • Cloud architecture and security certifications (e.g., CCSP, GIAC GCSA, CISSP, Azure-AZ-305, Azure-SC-100, GCP-PCA, GCP-PCSE, AWS-SA-Pro, AWS-Sec-Spec).
  • Minimum 15 years of experience in information security, with 10+ years focused on cloud security and architecture.

    • Gibson Dunn will consider for employment qualified Applicants with Criminal Histories in a manner consistent with the requirements of local law.

    Compensation & Benefits:

    The annual compensation range for this position is $190-230k. The salary offered within this range will depend upon qualifications and other operational considerations.

    Benefits offered for this position include health care; retirement benefits; paid days off, including sick time, and vacation time; parental leave; basic life insurance; Flexible Spending Accounts; as well as discretionary, performance-based bonuses.

    ______

    For technical difficulties with our online application, please contact us at staffrecruiting@gibsondunn.com. Our recruiting support team will respond as soon as possible.

    ______

    Gibson Dunn is committed to ensuring equal employment opportunities for all qualified applicants, including individuals with disabilities. We strive to ensure an inclusive and accessible hiring experience. The Firm will provide reasonable accommodations to qualified individuals with disabilities to enable participation in the application and recruitment process, unless doing so would impose an undue hardship, in accordance with applicable laws and regulations. If you require a reasonable accommodation to complete an application, participate in an interview, or otherwise take part in the recruitment process, please contact us at recruiting-accommodations@gibsondunn.com. Please note, this is a dedicated email inbox established exclusively to assist applicants with accommodation request related to the recruitment process. Inquiries about the status of an application or other non-accommodation matter will not receive a response.

    ______

    Notice to Recruitment Agencies: Gibson Dunn does not accept unsolicited resumes from recruitment agencies, headhunters, or vendors. Resumes sent to any Gibson Dunn employee or attorney, or submitted by an agency through the direct candidate application portal will not establish agency ownership of the candidate and Gibson Dunn will not be expected to honor an agency’s terms or pay any related fees. When a role is open for agency submissions, Gibson Dunn will notify our current agency partners and make the position available through our Agency Portal in Greenhouse. Only agencies that have been given portal access are authorized to submit candidates for consideration. Agencies without a current agreement that wish to be considered for future opportunities may contact staffrecruiting@gibsondunn.com. Please do not send resumes to this address.

    Ready to apply?
    You'll be redirected to Gibson Dunn's application page.

    Similar roles

    See how RiseMe works

    Match, tailor, and prep so you send fewer applications and land more interviews.