Jobs at MX Build (Now Hiring) — 4 open

Job Purpose

The Cloud Security Architect champions secure development and application security practices throughout the organization. Working with the Engineering and Product teams, the Security Architect ensures that applications are developed using secure patterns and reviews changes to existing applications. As a key member of the Information Security department, the Security Architect works to help build a comprehensive suite of security capabilities, controls, and standards. In a nutshell: building security and automation into the DevOps and engineering processes. 

Responsibilities

• Serve as a Cloud Security Subject Matter Expert (SME) for MX Technologies’ Information Security organization, providing authoritative guidance on public cloud security architecture and engineering

• Proactively identify cloud security risks across AWS and GCP environments, design pragmatic mitigation strategies, and lead or influence implementation efforts in partnership with engineering teams

• Design and produce clear, actionable architecture and security design artifacts to enable the Cloud Security team to implement solutions, whether developed in-house or delivered via third-party vendors

• Partner closely with product and platform engineering teams to design, review, and validate secure network, compute, container, and serverless architectures

• Provide hands-on IAM guidance, including policy design and review, to ensure least-privilege access models are consistently implemented across cloud environments

• Review cloud architecture and AI workloads to advise development teams on secure design patterns, data protection, identity controls, and potential security gaps prior to deployment

• Engage with public cloud service providers to evaluate and influence security features, roadmap capabilities, and best-practice implementations

• Evaluate cloud security vendors and tools (including CSPM/CNAPP platforms), conduct proof-of-value assessments, and provide recommendations based on technical fit and risk reduction

• Mentor and support junior cloud security team members through technical guidance, design reviews, and knowledge sharing

• Develop and maintain cloud security documentation, including architectural standards, reference designs, configuration guidelines, and operational processes

• Collaborate with senior leadership and cross-functional stakeholders to assess current and future cloud security requirements and align solutions with business and technology strategy

• Continuously stay current with emerging cloud threats, attack techniques, and security tooling, applying this knowledge to improve MX Technologies’ cloud security posture

Required Skills

• Bachelor's degree in computer science, Information Security, or a related technical discipline, or equivalent practical experience with 6-8 years of strong experience

• Strong hands-on understanding of public cloud infrastructure components and architectures, with demonstrated ability to identify and mitigate security risks in decentralized, hybrid, and multi-account cloud environments

• Solid understanding of information security principles, risk management, and compliance frameworks, and how they apply to large-scale public cloud platforms

• Proven experience designing, building, and securing AWS-based cloud environments, with meaningful hands-on experience; exposure to GCP is a plus

• Experience leveraging GenAI capabilities to enhance security operations.  Must be able to demonstrate hands-on experience with Agentic and Gen AI.

• Ability to automate security processes end-to-end and collaborate closely with cloud engineering and product teams to integrate security into CI/CD pipelines and development workflows

• Strong foundational knowledge of IP networking concepts, including routing, VPNs, DNS, and network segmentation in cloud environments

• Hands-on experience in several of the following areas: Cloud security administration across AWS and GCP; Designing and securing serverless applications and managed cloud services; Infrastructure-as-Code tools such as Terraform, CloudFormation, or Ansible; Command-line tooling (Bash, PowerShell, AWS CLI, Azure CLI); Container and orchestration technologies (Docker, Kubernetes); Cloud network architecture and VPC/VNet engineering; Cloud-native security services (e.g., AWS GuardDuty, Azure Defender for Cloud, GCP Security Command Center, WAF); Source control and pipeline security (e.g., GitHub Security features)

• Excellent verbal and written communication skills, with the ability to clearly articulate complex technical concepts to both technical and non-technical audiences

• Demonstrated ability to manage multiple priorities and remain effective in a fast-paced, rapidly changing environment

• Strong curiosity and commitment to continuous learning, with a desire to stay current on emerging cloud security threats, tools, and best practices.