Apply on Employer Site

Gibson Dunn · 20 hours ago

Principal Cloud Security Architect

New York, United States

Full-time

Onsite

Lead/Staff

$190K/yr - $230K/yr

15+ years exp

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. The Principal Cloud Security Architect plays a critical role in the InfoSec team, leading the design, implementation, and governance of cloud security architecture across the firm’s hybrid infrastructure.

Law Practice

Comp. & Benefits

H1B Sponsor Likely

Responsibilities

Architecting and supporting implementation of complex security controls across multi-cloud environments (e.g., Azure, AWS, GCP)

Define and implement Zero Trust principles, cloud security standards, and reference architectures

Lead the design of secure landing zones, guardrails, and multi-cloud governance frameworks

Partner with engineering teams to embed security into application and infrastructure designs

Architect identity and access strategies across various cloud solutions

Design secure network architectures including segmentation, private connectivity, and cloud-native firewalls

Conduct threat modeling, architecture reviews, and risk assessments of cloud-based infrastructure, applications, and services

Drive continuous improvement of cloud security posture through automation and monitoring

Reviewing cloud architecture and configurations to validate security posture and data protection

Leading threat modeling, risk assessments, and vulnerability management for cloud-native services

Administering cloud security testing, including penetration testing, misconfiguration audits, and incident simulations

Collaborating with DevOps and engineering teams to embed security into CI/CD pipelines and cloud deployments

Automate cloud security controls using Terraform, Python, PowerShell, and policy-as-code frameworks

Driving remediation of security findings and ensuring alignment with regulatory and compliance frameworks

Leading security reviews of cloud perimeter defenses (e.g., WAFs, cloud-native firewalls, DDoS protection)

Managing cloud security controls and endpoint protection platforms (e.g., Defender for Cloud, CrowdStrike, Cloudflare, Proofpoint TAP)

Providing technical guidance and mentorship to engineers and cross-functional teams

Developing and maintaining cloud security policies, playbooks, and documentation

Qualification

Cloud architectureCybersecurityTerraformDevSecOpsCloud security certificationsRegulatory frameworksEffective communicationCross-team collaborationContinuous learning

Required

Deep expertise of cybersecurity, cloud architecture (Azure, AWS, GCP), and associated security services

Experience with regulatory frameworks and standards (SOC2, GLBA, HIPAA, GDPR)

Knowledgeable in DevSecOps practices and infrastructure-as-code tools

Firsthand experience with Terraform, Bicep, CI/CD pipelines, and cloud security automation

Effective communication skills to engage technical and non-technical audiences

Proven ability to lead complex security initiatives and drive cross-team collaboration

Commitment to continuous learning and staying current with emerging cloud threats and technologies

Bachelor's degree in Computer Science, Information Systems, or related field

Cloud architecture and security certifications (e.g., CCSP, GIAC GCSA, CISSP, Azure-AZ-305, Azure-SC-100, GCP-PCA, GCP-PCSE, AWS-SA-Pro, AWS-Sec-Spec)

Minimum 15 years of experience in information security, with 10+ years focused on cloud security and architecture

Benefits

Health care

Retirement benefits

Paid days off, including sick time, and vacation time

Parental leave

Basic life insurance

Flexible Spending Accounts

Discretionary, performance-based bonuses

Company

Gibson Dunn

Glassdoor4.1

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes.

Founded in 1890

Global, US

1001-5000 employees

https://www.gibsondunn.com

H1B Sponsorship

Gibson Dunn has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2025 (29)

2024 (18)

2023 (19)

2022 (16)

2021 (6)

2020 (7)