Job description

About us At National Grid, we keep people connected and society moving. But it’s so much more than that. National Grid supplies us with the environment to make it happen. As we generate momentum in the energy transition for all, we don’t plan on leaving any of our customers in the dark. So, join us as Principal Cloud Security Architect, and find your superpower. We need you! We want to find an innovative, adaptable, and results-oriented Principal Cloud Security Architect for our Cybersecurity team . This position can be located in Brooklyn, NY, Hicksville, NY, Waltham, MA, or Syracuse, NY (candidates may also reside in either Connecticut, New Jersey, New Hampshire, Pennsylvania, Rhode Island, Vermont, or Maine). If you yearn to be innovative, contribute new ideas, and play a critical part in our Cloud Security organization, we want to hear from you! What you'll do As Principal Cloud Security Architect, you'll own the security architecture and operational security posture of Azure, working directly in the platform to design and implement controls, monitor risk, drive continuous remediation, to ensure compliance with industry regulations and best practices. You'll serve as a senior technical authority, representing cloud security operations strategies and initiatives, balancing architectural leadership with hands-on execution, and ensuring measurable risk reduction across cloud environments and workloads. You'll combine excellent relationship and collaboration skills, strong technical knowledge and hands-on experience with major cloud providers and emerging cloud security technologies, proficiency with DevOps and automation, and a practical approach to real-world risk reduction to solve complex security problems. Key responsibilities include the following: • Design and implement secure Azure cloud architectures, including network segmentation, policies and access controls, and secure accounts and subscriptions to best practices. • Assist with the architecting, engineering, and operationalizing of secure cloud solutions while balancing business objectives, cybersecurity requirements, and enterprise risk management considerations. • Develop, implement, and socialize technical patterns, standards and guidance for cloud infrastructure and applications. • Administer the Cloud Native Application Protection Platform (CNAPP), including hands-on administration and configuration of the CNAPP solution, prioritizing findings, and driving remediation activities. • Monitor cloud security posture and conduct regular security assessments and risk analysis to identify vulnerabilities and prioritize remediation efforts. • Research and assist with the selection, and lead the implementation of security solutions across Azure, AWS, and other major cloud providers, based on risk profiles. • Automate security policies and workflows using scripting languages and cloud native security tools to improve efficiency and scalability. • Assist with incident response activities for cloud-related security incidents, including investigation, containment, remediation, and post-mortem analysis. • Collaborate with cross-functional teams (Business project teams, cloud platform and engineering teams, DevOps, Compliance) to integrate security practices into cloud infrastructure and application deployments. • Serve as a trusted cloud security representative, effectively communicating technical risk, operational priorities, and influencing business stakeholders through clear communication, sound judgment, and data-driven, defensible recommendations. • Perform additional cloud security, cybersecurity, and risk management responsibilities as required to support organizational objectives. About you • 5+ years of hands-on experience securing cloud environments. • 5+ years of experience in security controls, cloud governance, and/or security architecture within a medium to large enterprise. • 5+ years of Linux and Windows administration experience, preferably in cloud environments. • 5+ years of experience with container technologies (Docker, Kubernetes, AKS, EKS, etc.) and associated security practices. • Strong knowledge of cloud-native services, networking, storage, encryption, policies, and security controls / patterns. • Hands-on experience supporting security initiatives across one or more major cloud platforms (Azure (preferred), AWS, and/or GCP). • Experience with scripting and automation technologies (CLI, PowerShell, Python, Bash, Terraform, GitHub Actions / Pipelines, etc.) is desirable. • Strong communication and presentation skills with the ability to succinctly convey complex cloud, security, and risk concepts to technical teams, business leaders, and stakeholders. • Proven ability to bridge technical and business priorities, interface with management, and articulate defensible cloud security, risk, and operational positions that drive informed decision-making. More Information Are you the right fit for this exciting role? You want to learn more about the position and National Grid's ambitious Digital Transformation? Then let's chat! Rewarding work and a collaborative, team-oriented culture are just the beginning . Review our digital benefit guide at ngbenefitslivebrighter.com for full details and descriptions. Our organization follows a hybrid work structure in our service territory (NY & MA and adjacent states) where employees can work remotely or from the office, as needed. Working from the office is encouraged when working on tasks that require a high degree of collaboration. We work with our employees to foster a flexible work schedule. #LI-CL1 #LI-HYBRID Salary Downstate NY $184,000 - $216,000 a year Massachusetts $172,000 - $202,000 a year Upstate NY $153,000 - $180,000 a year National Grid will not be providing visa sponsorship for this position now or in the future. You must have the ability to work without a need for current or future visa sponsorship. National Grid utilizes an assessment that evaluates the job qualifications/characteristics using AI or statistically based scoring. For more information, please view NYC Local Law 144. This position has a career path which provides for advancement opportunities within and across bands as you develop and evolve in the position; gaining experience, expertise and acquiring and applying technical skills. Candidates will be assessed and provided offers against the minimum qualifications of this role and their individual experience. National Grid is committed to providing equal employment opportunities to all employees and applicants for employment regardless of protected class. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, or any other protected status in accordance with applicable federal, state, and local laws. National Grid maintains affirmative action programs for individuals with disabilities and protected veterans. Our employment practices are designed to ensure that all individuals are treated fairly and with respect throughout the hiring process and during employment. National Grid complies with all applicable federal, state, and local anti-discrimination laws. We are dedicated to fostering a workplace that is free from unlawful discrimination and harassment, and we encourage a culture of respect for all.

Requirements

Must-haves

Design and implement secure Azure cloud architectures, including network segmentation, policies and access controls, and secure accounts and subscriptions to best practices.
Assist with the architecting, engineering, and operationalizing of secure cloud solutions while balancing business objectives, cybersecurity requirements, and enterprise risk management considerations.
Develop, implement, and socialize technical patterns, standards and guidance for cloud infrastructure and applications.
Administer the Cloud Native Application Protection Platform (CNAPP), including hands-on administration and configuration of the CNAPP solution, prioritizing findings, and driving remediation activities.
Monitor cloud security posture and conduct regular security assessments and risk analysis to identify vulnerabilities and prioritize remediation efforts.
Research and assist with the selection, and lead the implementation of security solutions across Azure, AWS, and other major cloud providers, based on risk profiles.
Automate security policies and workflows using scripting languages and cloud native security tools to improve efficiency and scalability.
Assist with incident response activities for cloud-related security incidents, including investigation, containment, remediation, and post-mortem analysis.
Collaborate with cross-functional teams (Business project teams, cloud platform and engineering teams, DevOps, Compliance) to integrate security practices into cloud infrastructure and application deployments.
Perform additional cloud security, cybersecurity, and risk management responsibilities as required to support organizational objectives.
5+ years of hands-on experience securing cloud environments.
5+ years of experience in security controls, cloud governance, and/or security architecture within a medium to large enterprise.
5+ years of Linux and Windows administration experience, preferably in cloud environments.
5+ years of experience with container technologies (Docker, Kubernetes, AKS, EKS, etc.) and associated security practices.
Strong knowledge of cloud-native services, networking, storage, encryption, policies, and security controls / patterns.
Experience with scripting and automation technologies (CLI, PowerShell, Python, Bash, Terraform, GitHub Actions / Pipelines, etc.) is desirable.
Strong communication and presentation skills with the ability to succinctly convey complex cloud, security, and risk concepts to technical teams, business leaders, and stakeholders.
Proven ability to bridge technical and business priorities, interface with management, and articulate defensible cloud security, risk, and operational positions that drive informed decision-making.

Nice-to-haves

Hands-on experience supporting security initiatives across one or more major cloud platforms (Azure (preferred), AWS, and/or GCP).

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azureawsdockerkubernetesgcppythonai

Platform: successfactors
Effort: medium