Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Application Security Architect – Cloud & DevSecOps role.

Rezi rewrites your resume against CLA (CliftonLarsonAllen)'s job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Application Security Architect – Cloud & DevSecOps posting at CLA (CliftonLarsonAllen) — free, in seconds.

About the Role

The Application Security Architect will bridge application security architecture, engineering, DevOps, and cloud security. In this role, you will lead and support secure design reviews for proprietary and third-party solutions, assess technical and data flows, and identify the security controls needed to protect CLA’s technology environment.

Responsibilities

Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions.
Document identified risks, required mitigations, risk owners, exceptions, and residual-risk decisions.
Review system interaction diagrams and detailed logical, functional, physical, and data-flow diagrams.
Identify trust boundaries, security boundaries, integration points, administrative interfaces, data stores, and external dependencies.
Develop reusable security standards, assessment patterns, review templates, control baselines, and architectural guidance.
Establish and build a Cloud Security Posture Management practice by coordinating the appropriate people, processes, technology, governance, and service expectations.
Assess cloud permissions, secrets management, deployment architecture, infrastructure as code, container images, orchestration configurations, and cloud-native deployment patterns.
Identify opportunities to prevent configuration issues and policy violations before deployment through policy-as-code, automated validation, and reusable engineering guardrails.
Provide technical security leadership across Development, Cloud, Platform, Product, Data, Information Technology, Enterprise Architecture, and Risk teams.
Connect code, pipeline, identity, integration, data, and cloud architecture risks to practical security controls and business outcomes.
Distinguish mandatory security requirements from recommendations and risk-based enhancements.
Escalate unresolved material risks through established risk-acceptance processes.
Communicate technical risks, required controls, exceptions, ownership, and residual risk to technical and non-technical stakeholders.
Build strong partnerships, improve developer engagement with Application Security, and influence teams without direct authority.

Requirements

Experience leading or supporting secure design reviews for application, cloud, commercial, and hybrid solutions.
Experience reviewing technical architecture, system interaction, and data-flow diagrams.
Experience with application security architecture, cloud security, DevOps security, and security engineering.
Knowledge of CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, and software supply-chain security.
Experience assessing cloud permissions, secrets management, deployment architecture, container images, orchestration configurations, and cloud-native deployment patterns.
Experience connecting technical security risks to practical controls and business outcomes.
Ability to communicate technical risks and security requirements to both technical and non-technical stakeholders.
Ability to build relationships and influence cross-functional teams without direct authority.
7 years of general IT experience required.
4 years of experience with security of IT systems required.
2 years of experience with security design/strategy required.

Skills

Application Security Architecture
Cloud Security
DevOps Security
Security Engineering
CI/CD pipelines
GitHub Actions and workflows
Infrastructure as code
Containers
Software supply-chain security
Cloud permissions assessment
Secrets management
Deployment architecture assessment
Container image assessment
Orchestration configuration assessment
Cloud-native deployment patterns assessment
Policy-as-code
Automated validation
Engineering guardrails
Cloud Security Posture Management
Azure cloud services
Cloud-native security patterns
Enterprise cloud identity platforms
Black Duck Polaris
Software composition analysis
Application security platform
Container security
Automated compliance controls
Threat modeling
Architecture risk analysis
Vulnerability management
Risk-acceptance activities
NIST security frameworks
NIST risk-management frameworks
API security
Integration platforms
Citizen-development governance
Secure container orchestration patterns

Experience Level

7 years of general IT experience
4 years of experience with security of IT systems
2 years of experience with security design/strategy

Education Level

Bachelor's degree
Combination of relevant experience, education, and training may be accepted in lieu of degree.

Benefits

Health insurance
Dental insurance
Vision insurance
401k
Comprehensive benefit options

About the Company

CLA is a top 10 national professional services firm.
Our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services.

Equal Opportunity

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
Click here to learn about your hiring rights.