Cloud Security Architect

Job Summary:
This role is responsible for securing and governing enterprise cloud data environments, with a core emphasis on Microsoft 365. The position also provides extended coverage across Google Cloud/Workspace, AWS, and Microsoft Azure. The successful candidate will design and implement scalable, compliance-driven security frameworks to support AI-enabled data flows (e.g., Microsoft Copilot and Google AI). This includes enforcing sensitivity labeling, tagging, data lifecycle governance, and platform-agnostic reporting.

In addition to granular data controls, this role encompasses tenant-level hardening, Zero Trust policy enforcement, conditional access configuration, and secure collaboration guardrails. The ideal candidate will proactively architect future-proof protections for hybrid cloud deployments, ensuring operational resilience, regulatory compliance, and cross-platform security consistency.

Key Responsibilities:

• Design and implement secure data protection strategies across Microsoft 365, Google Cloud, AWS, and Azure.


• Enable secure AI integrations (e.g., Google AI and Microsoft Copilot) across environments.


• Manage data sensitivity and lifecycle controls using Microsoft Purview and similar tools.


• Execute tenant-wide security enhancements aligned with Zero Trust principles.


• Automate tasks and reporting using tools such as PowerShell, Graph API, Google Cloud SDK, AWS CLI, and Power Platform.


• Oversee records management, labeling, tagging, and regulatory compliance across platforms.


• Translate evolving business needs and emerging technologies into actionable, secure solutions.


• Advise on AI governance models and secure data interaction with new technologies.


• Support cloud platform expansion and evaluate new tools for data protection and secure collaboration.

Minimum Qualifications:

• Active DoD SECRET Clearance


• Relevant Cloud Computing certifications (e.g., Azure Administrator (AZ-104), Developer (AZ-204), Security Engineer (AZ-500), Data Engineer (DP-203), and AI Engineer (AI-102)


• Certification meeting DoD 8570.01 IAT Level 2 (Security+)


• 3+ years of experience in Microsoft 365 administration and data security.


• 3+ years of experience in cloud security environments.


• Familiarity with Zero Trust architecture and multi-platform implementation.


• In-depth understanding of sensitivity labels, data governance, tagging, Intune, and retention policies. (i.e. Microsoft Purview experience)

Desired Skills:

• Proficiency with scripting and automation tools, including PowerShell, Graph API, Google SDK, and AWS CLI.

Demonstrated ability to manage cross-platform records and lifecycle governance.

• Strong cross-functional collaboration skills with technical and business teams.


• Strong experience deploying cloud features and services across diverse environments.


• Working knowledge of Google Cloud, Google Workspace, AWS, and Azure security configurations.


• Experience in AI platform integration and governance across ecosystems.