Accogliere il futuro.
Creare nuove opportunità.

Job Purpose and Impact

• The Cloud Security Architect provides technical leadership in defining and advancing Cargill’s cloud security architecture. This role is responsible for shaping security design standards, reference architectures, and guardrails that enable secure, resilient, and scalable cloud adoption across business units. Operating as a senior individual contributor, the Cloud Security Architect influences platform design, migration strategy, and engineering practices across teams, ensuring security is embedded by design into Infrastructure as a Service (IaaS) and Platform as a Service (PaaS) environments. The role partners closely with Cloud Platform, Application, DevOps, and Security teams while mentoring engineers and architects.

Key Accountabilities

• Define and evolve cloud security architecture, reference designs, and standards aligned to Cargill’s cloud strategy
• Serve as a technical authority for cloud security across AWS and Azure, guiding secure adoption at scale
• Architect and govern cloud security platforms and capabilities (e.g., CSPM, IAM, network security, data protection, monitoring, runtime security)
• Establish and drive adoption of secure-by-default patterns and guardrails, leveraging automation, Infrastructure as Code, and cloud-native services
• Provide architectural guidance to Cloud Platform teams, DevOps, Software Engineering, Enterprise IT, and Compliance
• Influence security integration into CI/CD pipelines, migration frameworks, and platform services
• Act as a senior technical escalation point during cloud security incidents, supporting investigation, remediation strategy, and post-incident architectural improvements
• Mentor engineers and architects through design reviews, knowledge sharing, and technical guidance

Qualifications

• Bachelor’s degree in a related field or equivalent practical experience
• 8–14 years of experience in cloud engineering and cloud security, with demonstrated architectural responsibility
• Strong experience designing secure cloud-native architectures on AWS and/or Azure
• Expertise with cloud security technologies and platforms, such as IAM, GuardDuty, Wiz, Prisma Cloud, or equivalent CSPM tools
• Advanced understanding of cloud networking and security constructs (segmentation, routing, firewalls, identity boundaries)
• Experience architecting and securing container platforms (Kubernetes, EKS, ECS, Docker)
• Strong skills in Infrastructure as Code and automation, using Terraform and scripting languages such as Python, Golang, or PowerShell
• Solid understanding of DevOps, CI/CD, application resiliency, and security-by-design principles
• Ability to analyze complex systems, telemetry, and risk data to drive architectural decisions

Preferred Qualifications

• Cloud certifications (AWS, Azure, and/or Google Cloud)Security certifications such as CISSP, CCSP, GSEC, or equivalentExperience supporting large-scale cloud migrations or enterprise cloud platforms

#HiPo