Cloud Security Architect

About the role

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high-stakes. The firm’s work is distinguished by a unique combination of precision and vision.

Based in any U.S. Office, the Cloud Security Architect plays a critical role in the InfoSec team, leading the design, implementation, and governance of cloud security architecture across the firm’s hybrid infrastructure. This position ensures compliance with Information Security and IS policies while aligning with industry best practices for cloud security.

This role reports to the Senior Director Information Security Engineering and collaborates closely with the IT Architect, Cloud Administrators, and senior leadership on cloud operations. The Cloud Security Architect will interface with technical teams, legal and compliance stakeholders, external auditors, and cloud service providers.

Responsibilities include:

- Architecting and supporting implementation of complex security controls across multi-cloud environments (e.g., Azure, AWS, GCP).

- Define and implement Zero Trust principles, cloud security standards, and reference architectures.

- Lead the design of secure landing zones, guardrails, and multi-cloud governance frameworks.

- Partner with engineering teams to embed security into application and infrastructure designs.

- Architect identity and access strategies across various cloud solutions

- Design secure network architectures including segmentation, private connectivity, and cloud-native firewalls.

- Conduct threat modeling, architecture reviews, and risk assessments of cloud-based infrastructure, applications, and services.

- Drive continuous improvement of cloud security posture through automation and monitoring.

- Reviewing cloud architecture and configurations to validate security posture and data protection.

- Leading threat modeling, risk assessments, and vulnerability management for cloud-native services.

- Administering cloud security testing, including penetration testing, misconfiguration audits, and incident simulations.

- Collaborating with DevOps and engineering teams to embed security into CI/CD pipelines and cloud deployments.

- Automate cloud security controls using Terraform, Python, PowerShell, and policy-as-code frameworks.

- Driving remediation of security findings and ensuring alignment with regulatory and compliance frameworks.

- Leading security reviews of cloud perimeter defenses (e.g., WAFs, cloud-native firewalls, DDoS protection).

- Managing cloud security controls and endpoint protection platforms (e.g., Defender for Cloud, CrowdStrike, Cloudflare, Proofpoint TAP).

- Providing technical guidance and mentorship to engineers and cross-functional teams.