Application Security Architect – Cloud, DevSecOps

CLA (CliftonLarsonAllen)

. Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions .

Posted 10/14/2026full-timeUnited StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in secure design reviews, cloud security posture management, and application security architecture. Proficient in assessing technical risks and implementing security controls across diverse teams and environments.

Highest-signal resume keywords

Secure Design ReviewsCloud Security Posture ManagementApplication Security ArchitectureCI/CD PipelinesCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringThreat ModelingVulnerability ManagementInfrastructure As CodePolicy-As-CodeSecrets ManagementContainer SecurityAutomated Compliance ControlsData-Flow DiagramsRisk Management

Soft Skills

CommunicationRelationship BuildingInfluencing Without Authority

Tools & Technologies

Azure Cloud ServicesGitHub ActionsBlack Duck PolarisCloud-Native Security PatternsIntegration Platforms

Certifications & Qualifications

CISSPCCSP

Industry Keywords

NIST Security FrameworkApplication SecurityCloud SecurityDevOps SecurityHybrid Solutions

Tech Stack

Tools & technologies

AzureCloud

About the role

Key responsibilities & impact

Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions
Document risks, required mitigations, risk owners, exceptions, and residual-risk decisions
Review system interaction diagrams and logical, functional, physical, and data-flow diagrams
Identify trust boundaries, security boundaries, integration points, administrative interfaces, data stores, and external dependencies
Develop reusable security standards, assessment patterns, review templates, control baselines, and architectural guidance
Establish and build a Cloud Security Posture Management practice
Assess cloud permissions, secrets management, deployment architecture, infrastructure as code, container images, orchestration configurations, and cloud-native deployment patterns
Implement policy-as-code, automated validation, and reusable engineering guardrails to prevent configuration issues and policy violations
Provide technical security leadership across Development, Cloud, Platform, Product, Data, Information Technology, Enterprise Architecture, and Risk teams
Connect code, pipeline, identity, integration, data, and cloud architecture risks to practical security controls and business outcomes
Distinguish mandatory security requirements from recommendations and risk-based enhancements
Escalate unresolved material risks through risk-acceptance processes
Communicate technical risks, required controls, exceptions, ownership, and residual risk to technical and non-technical stakeholders
Build partnerships, improve developer engagement with Application Security, and influence teams without direct authority

Requirements

What you’ll need

Experience leading or supporting secure design reviews for application, cloud, commercial, and hybrid solutions
Experience reviewing technical architecture, system interaction, and data-flow diagrams
Experience with application security architecture, cloud security, DevOps security, and security engineering
Knowledge of CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, and software supply-chain security
Experience assessing cloud permissions, secrets management, deployment architecture, container images, orchestration configurations, and cloud-native deployment patterns
Experience connecting technical security risks to practical controls and business outcomes
Ability to communicate technical risks and security requirements to technical and non-technical stakeholders
Ability to build relationships and influence cross-functional teams without direct authority
Professional certification such as CISSP, CCSP, or comparable credential preferred
Experience with Azure cloud services, cloud-native security patterns, and enterprise cloud identity platforms preferred
Experience with Black Duck Polaris or comparable software composition analysis and application security platform preferred
Experience with Cloud Security Posture Management, container security, policy-as-code, artifact integrity, secrets management, and automated compliance controls preferred
Experience conducting threat modeling, architecture risk analysis, secure design reviews, vulnerability management, and risk-acceptance activities preferred
Experience working with NIST security and risk-management frameworks preferred
Familiarity with API security, integration platforms, citizen-development governance, and secure container orchestration patterns preferred
7 years of general IT experience required, including 4 years with security of IT systems and 2 years with security design/strategy
Bachelor's degree required; combination of relevant experience, education, and training may be accepted in lieu of degree

Benefits

Comp & perks

Health insurance
Dental insurance
Vision insurance
401(k)
Comprehensive benefit options supporting physical, financial, social, and emotional well-being