Job description

Ankura is a team of excellence founded on innovation and growth. Position Summary: The Cloud Security Architect performs cloud security posture and configuration reviews to identify misconfigurations, security control gaps, support migrations, and opportunities for improvement. This role executes assessment workflows using CSPM-based approaches and delivers clear, prioritized recommendations aligned with client objectives and relevant standards. This is remote based in the United States. Responsibilities: Conduct cloud configuration and security posture reviews using CSPM approaches and automated scanning methods aligned with Ankura cloud assessment practices. Assess cloud configurations against predefined requirements and map gaps to common standards and regulatory expectations referenced in client deliverables, such as NIST, ISO, and CIS. Analyze results and deliver client-ready reports that include prioritized remediation recommendations and actionable roadmaps. Support reviews across key cloud security domains commonly covered in cloud assessments, including identity and access, network segmentation, logging and monitoring, workload configuration, and security governance. Manage internal and third-party resources as needed for projects and client engagements Collaborate with engagement leads and stakeholders to validate findings and ensure recommendations are practical and aligned with the client’s operating model. Work with clients and business leaders to support statements of work (SOWs) and engagement delivery. Work cross-functionally with IT, engineering, and security stakeholders to drive adoption of cloud security controls and operational improvements. Requirements: Bachelors degree or equivalent experience 10 years of relevant experience Cloud Certificate (Azure /AWS/GPC) required Experience delivering cloud security assessments for Microsoft Azure, Microsoft 365, and/or AWS environments, including configuration analysis and remediation planning; experience with GCP and Oracle Cloud is a plus. Experience configuring Microsoft Copilot and Microsoft Purview is a plus. Strong written communication skills, with the ability to produce structured executive summaries and detailed findings and recommendations. Hands-on experience implementing, migrating, and operating security controls in Microsoft Azure and/or Microsoft 365 environments. Practical knowledge of identity and access management patterns in Microsoft cloud environments (for example, Entra ID and privileged access concepts). Experience implementing security governance and controls that support compliance and risk management expectations in cloud environments. Experience with CSPM tools and workflows used in cloud posture reviews, such as Prisma Cloud or Zscaler Posture Control is preferred. Experience with cloud security posture management and configuration review programs, including translating findings into prioritized remediation plans is preferred. Familiarity with security frameworks commonly used in cloud assessments, including NIST, ISO, and CIS mappings is preferred Willingness to travel as needed (approximately 25%) Please note that this role requires permanent authorization to work in the U.S. (i.e. U.S. citizen or permanent resident). #LI-KW1 #LI-Hybrid For individuals assigned and/or hired to work in California, Colorado, New York or other states with relevant pay transparency laws, Ankura is required to include a reasonable estimate of the compensation range for this role. This compensation range is specific to the said markets and considers a broad range of factors including but not limited to skill sets, experience and training, licensure and certifications, and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. The range does not include additional benefits outside of salary. At Ankura, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each role. A reasonable estimate of the current base pay range is between $140,000 to $190,000; this range is not a promise of a particular wage. Ankura is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against based on disability. Equal Employment Opportunity Posters, if you have a disability and believe you need a reasonable accommodation to search for a job opening, submit an online application, or participate in an interview/assessment, please email accommodations ankura.com or call toll-free 1.312-583-2122. This email and phone number are created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues unrelated to a disability, will not receive a response.

Requirements

Must-haves

Ankura is a team of excellence founded on innovation and growth.
Conduct cloud configuration and security posture reviews using CSPM approaches and automated scanning methods aligned with Ankura cloud assessment practices.
Assess cloud configurations against predefined requirements and map gaps to common standards and regulatory expectations referenced in client deliverables, such as NIST, ISO, and CIS.
Analyze results and deliver client-ready reports that include prioritized remediation recommendations and actionable roadmaps.
Support reviews across key cloud security domains commonly covered in cloud assessments, including identity and access, network segmentation, logging and monitoring, workload configuration, and security governance.
Manage internal and third-party resources as needed for projects and client engagements
Collaborate with engagement leads and stakeholders to validate findings and ensure recommendations are practical and aligned with the client’s operating model.
Work with clients and business leaders to support statements of work (SOWs) and engagement delivery.
Work cross-functionally with IT, engineering, and security stakeholders to drive adoption of cloud security controls and operational improvements.
Bachelors degree or equivalent experience
10 years of relevant experience
Cloud Certificate (Azure /AWS/GPC) required
Strong written communication skills, with the ability to produce structured executive summaries and detailed findings and recommendations.
Hands-on experience implementing, migrating, and operating security controls in Microsoft Azure and/or Microsoft 365 environments.
Practical knowledge of identity and access management patterns in Microsoft cloud environments (for example, Entra ID and privileged access concepts).
Experience implementing security governance and controls that support compliance and risk management expectations in cloud environments.
Willingness to travel as needed (approximately 25%)
Please note that this role requires permanent authorization to work in the U.S. (i.e. U.S. citizen or permanent resident).

Nice-to-haves

Experience delivering cloud security assessments for Microsoft Azure, Microsoft 365, and/or AWS environments, including configuration analysis and remediation planning; experience with GCP and Oracle Cloud is a plus.
Experience configuring Microsoft Copilot and Microsoft Purview is a plus.
Experience with CSPM tools and workflows used in cloud posture reviews, such as Prisma Cloud or Zscaler Posture Control is preferred.
Experience with cloud security posture management and configuration review programs, including translating findings into prioritized remediation plans is preferred.
Familiarity with security frameworks commonly used in cloud assessments, including NIST, ISO, and CIS mappings is preferred

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureawsgcp

Platform: workday
Effort: long