Job description

Every moment of every day, people around the world rely on the energy they access through infrastructure built by Quanta. Comprising the largest skilled-labor force in North America, our employees are highly skilled and innovative, continually working to connect people and power. We’re building the infrastructure that supports the energy transition, and there are more opportunities than ever to be part of our team. Join us and build your career building a brighter future. Imagine what you could do here. We encourage, inspire, and support our people to seize opportunities in our corporate office and with hundreds of our operating companies worldwide that provide solutions for the utility, renewable energy, electric power, industrial, and communications industries. Quanta actively promotes and maintains a culture of belonging where all employees can be themselves, live their values, and find opportunities to succeed. When you join our team, you join a dynamic organization in which career development is encouraged, excellence is rewarded, and diversity is prized. Come find out how our people power modern life. Quanta Services is seeking an IT Security Architect to join our IT Security team, reporting to the Director, IT Security. This is a senior, hands-on architecture role focused on securing the organization's multi-cloud footprint as Quanta executes a cloud-first transformation across 100+ operating companies. The role blends security architecture with forward-deployed engineering: the Architect both designs secure cloud architectures and embeds directly with cloud, data, and application teams to build and harden secure solutions — including agentic and AI-driven workloads on AWS and Microsoft Azure. The Architect brings deep, current cloud security engineering expertise and is expected to produce both secure-by-design guidance and working reference implementations. This role complements the broader security architecture function: partnering with the enterprise security architecture team on threat-modeling methodology, framework governance, and cross-OpCo review standards, while providing the deep cloud-platform and data-platform engineering capability to turn those standards into deployed, defensible architectures. • Combine security architecture with forward-deployed engineering: design secure cloud architectures and embed with cloud, data, and application teams to build and harden secure solutions on AWS and Azure; • Design and implement secure reference architectures and secure-by-design patterns for cloud workloads, including landing zones, network segmentation, identity, secrets management, and egress control; • Architect and secure agentic and AI/LLM-driven workloads, including secure integration patterns, API and tool/MCP security, data protection, and guardrails for AI services on AWS and Azure; • Provide security architecture and hands-on engineering for data-platform workloads, with particular focus on Databricks (Unity Catalog, workspace/network isolation, access governance, and secure app/endpoint exposure); • Build working reference implementations, automation, and infrastructure-as-code that engineering teams can adopt directly, rather than design documents alone; • Architect secure patterns for internet-exposed cloud workloads, including WAF, application gateway, private connectivity, and egress controls; • Partner with the enterprise security architecture function to apply threat models, control baselines, and review standards to cloud and data-platform designs; • Provide technical guidance and mentorship to cloud and engineering teams, and communicate cloud security risk and posture to senior leadership; and • Adhere to internal standards, policies, and procedures, and perform other duties as assigned. Required Education and Experience • Bachelor's degree in Computer Science, Cyber Security, or a related field, or commensurate experience in cloud security architecture and engineering; • 7 or more years of relevant IT experience in cloud and application development; • 5 or more years devoted specifically to security, with deep, hands-on AWS security and Azure cloud security engineering experience; • Demonstrated experience building and securing solutions on both AWS and Azure (not single-cloud); and • Hands-on experience building applications or automation, including the ability to develop agentic and AI-driven solutions on AWS and/or Azure. Preferred Education and Experience • Master's degree in Computer Science, Cyber Security, or a related field preferred; • Hands-on Databricks security experience (Unity Catalog, network isolation, access governance, Databricks Apps exposure) preferred; • Forward-deployed and embedded engineering experience working directly inside delivery teams preferred; • Experience with CNAPP/CSPM tooling (e.g., Wiz or Cortex Cloud), EDR/XDR (e.g., CrowdStrike), and modern SIEM preferred; and • Experience in a large, federated, or multi-business-unit enterprise a plus. Licenses / Certifications Required: N/A Preferred: Microsoft Azure Security Engineer Associate (AZ-500) — strongly preferred; AWS Certified Security – Specialty — strongly preferred (or required within an agreed timeframe of hire); CISSP or CCSP — preferred; Databricks or data-platform certification — a plus Supervisory Responsibilities N/A Travel Requirements Travels: No Percent of time: N/A Overnight required: No Physical Demands Stationary Position: Frequently Pushing/Pulling/Reaching: Seldom Climb: N/A Kneel: N/A Grab: N/A Bend: N/A Lift/carry over: Less than 10 LBS Vision: Constantly Hearing: Frequently Working Conditions Wet or Humid: N/A Working near or on moving mechanical parts: N/A Working near or on heavy machinery: N/A Working in high places: N/A Exposed to fumes or airborne particles: N/A Exposed to toxic or caustic chemicals: N/A Frequency of working in outdoor weather conditions: N/A Work with Electricity: N/A Work with explosives: N/A Work on or near a source of radiation: N/A Loud noise conditions (above 87dB): N/A Other Environmental Factors including weather conditions: N/A • Competitive compensation and benefits package • Flexible work options • Educational assistance • Wellness and Mental Health programs • Paid Parental Leave • Employee Referral Program • Volunteer Time Off • Learning and Development Programs • Office Amenities and Perks All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, national origin or ancestry, sex (including gender, pregnancy, sexual orientation, and/or gender identity), age, disability, genetic information, veteran status, and/or any other basis protected by applicable federal, state or local law. We are an Equal Opportunity Employer, including disability and protected veteran status. We prohibit all types of discrimination and are committed to providing access and equal opportunity for individuals with disabilities. For additional information or if reasonable accommodation is needed to participate in the job application, interview, or hiring processes or to perform the essential functions of a position, please contact us the Company’s Human Resources department. Not ready to apply? Connect with us for general consideration.

Requirements

Must-haves

Combine security architecture with forward-deployed engineering: design secure cloud architectures and embed with cloud, data, and application teams to build and harden secure solutions on AWS and Azure;
Design and implement secure reference architectures and secure-by-design patterns for cloud workloads, including landing zones, network segmentation, identity, secrets management, and egress control;
Architect and secure agentic and AI/LLM-driven workloads, including secure integration patterns, API and tool/MCP security, data protection, and guardrails for AI services on AWS and Azure;
Provide security architecture and hands-on engineering for data-platform workloads, with particular focus on Databricks (Unity Catalog, workspace/network isolation, access governance, and secure app/endpoint exposure);
Build working reference implementations, automation, and infrastructure-as-code that engineering teams can adopt directly, rather than design documents alone;
Architect secure patterns for internet-exposed cloud workloads, including WAF, application gateway, private connectivity, and egress controls;
Partner with the enterprise security architecture function to apply threat models, control baselines, and review standards to cloud and data-platform designs;
Provide technical guidance and mentorship to cloud and engineering teams, and communicate cloud security risk and posture to senior leadership; and
Adhere to internal standards, policies, and procedures, and perform other duties as assigned.
Required Education and Experience
Bachelor's degree in Computer Science, Cyber Security, or a related field, or commensurate experience in cloud security architecture and engineering;
7 or more years of relevant IT experience in cloud and application development;
5 or more years devoted specifically to security, with deep, hands-on AWS security and Azure cloud security engineering experience;
Demonstrated experience building and securing solutions on both AWS and Azure (not single-cloud); and
Hands-on experience building applications or automation, including the ability to develop agentic and AI-driven solutions on AWS and/or Azure.
Licenses / Certifications
Required: N/A
Supervisory Responsibilities

Nice-to-haves

Preferred Education and Experience
Master's degree in Computer Science, Cyber Security, or a related field preferred;
Hands-on Databricks security experience (Unity Catalog, network isolation, access governance, Databricks Apps exposure) preferred;
Forward-deployed and embedded engineering experience working directly inside delivery teams preferred;
Experience with CNAPP/CSPM tooling (e.g., Wiz or Cortex Cloud), EDR/XDR (e.g., CrowdStrike), and modern SIEM preferred; and
Experience in a large, federated, or multi-business-unit enterprise a plus.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsazurellmapi

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Vision

Parental Leave

Wellness