云安全架构师负责人（GCP）
Lead Cloud Security Architect (GCP)
概述
首席云安全架构师是云基础设施的主要安全顾问，主要专注于Google Cloud Platform。您负责安全设计决策，评估架构中的漏洞，并指导团队在云平台上实施安全基础设施。您与工程团队、云架构师和管理层合作，确保系统符合安全和合规标准，同时按时交付。该职位需要战略思维和战术执行。您将设计关键的安全控制措施，进行威胁建模，验证配置，并在开发周期中作为团队信赖的安全指导资源。
职责
- 为Google Cloud Platform上的云工作负载设计安全架构
- 为关键的云安全决策创建安全设计文档和决策日志
- 与工程和运维团队合作，实施云安全服务和控制措施
- 根据组织的安全策略和云平台的最佳实践验证配置
- 确保符合云安全最佳实践和适用的合规要求
- 对关键的安全控制措施做出决策，并记录安全、成本和速度之间的权衡
- 创建安全指南、操作手册和培训内容，用于开发和运维团队的云安全
- 审查架构设计和云基础设施配置中的安全风险
- 为高风险的云工作负载进行威胁建模并推荐缓解措施
- 作为工程、运维和管理层在云安全问题上的可信赖安全顾问
- 向技术和非技术受众清晰地传达安全决策和风险
- 完成年度绩效评估和/或目标设定中列出的所有职责
- 完成所有特殊项目和其他指定任务
- 能够在合理调整的情况下履行职责
本职位描述旨在描述正在执行的工作性质和水平，不应被理解为职责、职责和技能的详尽列表。本职位描述不构成雇佣协议，随着Cotiviti的需求和职位要求的变化，可能会进行更改。
资格
- 8年以上专业安全架构或云基础设施工程经验
- 学士学位
查看英文原文
Overview
The Lead Cloud Security Architect is the principal security advisor for cloud infrastructure, with primary focus on Google Cloud Platform. You own security design decisions, evaluate architecture for vulnerabilities, and guide teams on implementing secure infrastructure across cloud platforms. You work with engineering teams, cloud architects, and leadership to ensure systems meet security and compliance standards while delivering on timeline. The role requires both strategic thinking and tactical execution. You will design critical security controls, conduct threat modeling, validate configurations, and serve as the trusted resource teams turn to for security guidance throughout the development lifecycle.
Responsibilities
- Design security architecture for cloud workloads on Google Cloud Platform• Create security design documents and decision logs for critical cloud security decisions.• Partner with engineering and operations teams to implement cloud security services and controls.• Validate configurations against organizational security policies and cloud platform best practices.• Ensure alignment with cloud security best practices and applicable compliance requirements.• Make decisions on critical security controls and document trade-offs between security, cost, and speed.• Create security guidelines, runbooks, and training for development and operations teams on cloud security.• Review architecture designs and cloud infrastructure configurations for security risks.• Conduct threat modeling for high-risk cloud workloads and recommend mitigations.• Serve as the trusted security advisor to engineering, operations, and leadership teams on cloud security matters.• Communicate security decisions and risks clearly to both technical and non-technical audiences.• Complete all responsibilities as outlined in the annual performance review and/or goal setting.• Complete all special projects and other duties as assigned.• Must be able to perform duties with or without reasonable accommodation.
This job description is intended to describe the general nature and level of work being performed and is not to be construed as an exhaustive list of responsibilities, duties and skills required. This job description does not constitute an employment agreement and is subject to change as the needs of Cotiviti and requirements of the job change.
Qualifications
- 8+ years of professional security architecture or cloud infrastructure engineering experience• Bachelor’s degree in computer science, Information Security, or related field• Deep knowledge of Google Cloud Platform security services and best practices, with openness to other cloud platforms• Ability to make security decisions and explain trade-offs to technical and non-technical audiences• Experience with infrastructure-as-code tools (Terraform or similar) and cloud security practices• Cloud security certification (Google Cloud Professional Cloud Security Engineer, CISSP, or equivalent)
Cognitive / Mental Requirements• Security judgment—ability to evaluate risk and make sound recommendations• Communication and influence—ability to present recommendations to both technical and executive audiences• Problem-solving—ability to break down security requirements into actionable steps• Collaboration—willingness to work across teams and balance competing priorities• Ownership—accountability for security decisions and implementation• Continuous learning—comfort staying current with new cloud services and security practices
Physical Requirements and Working Conditions• Remaining in a stationary position for extended periods• Repeating motions that may include wrists, hands, and fingers• Must be able to provide a dedicated, secure work area.• Must be able to provide high-speed internet access / connectivity and office setup and maintenance.
Base compensation ranges from $140,000 to $170,000 per year. Specific offers are determined by various factors, such as experience, education, skills, certifications, and other business needs. This role is eligible for a discretionary bonus.
Cotiviti offers team members a competitive benefits package to address a wide range of personal and family needs, including medical, dental, vision, disability, and life insurance coverage, 401(k) savings plans, paid family leave, 9 paid holidays per year, and 17-27 days of Paid Time Off (PTO) per year, depending on specific level and length of service with Cotiviti. For information about our benefits package, please refer to our Careers page.
Since this job will be based remotely, all interviews will be conducted virtually.
Date of posting: 9/11/2026
Applications are assessed on a rolling basis. We anticipate that the application window will close on 12/11/2026, but the application window may change depending on the volume of applications received or close immediately if a qualified candidate is selected.
#remote
#senior
Originally posted on Himalayas