Senior Cloud Security Architect

ABOUT THE ROLE The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and enhance government services across New York City. This position reports to the Infrastructure Management division and offers the chance to work with cutting-edge technology on projects that meaningfully impact millions of New Yorkers. KEY RESPONSIBILITIES - Assist with the design and deployment of security solutions in large, complex hybrid cloud environments. - Provide guidance during planning and implementation of secure designs, processes, and resilient solutions. - Interact with OTI Infrastructure Management leadership, engineering, architecture, operations teams, and cloud vendors. - Handle special projects and initiatives as assigned. MINIMUM QUALIFICATIONS - A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to the projects and policies required by the position. - Education and/or experience which is equivalent to the above. SPECIAL REQUIREMENTS - 10+ years of experience in Cloud Security Engineering/Architecture or a related field. - Hands-on experience securing workloads in AWS, Azure, or GCP. - Ability to design secure multi-account/multi-tenant cloud infrastructures and enforce least privilege via IAM. - Experience embedding security into DevOps workflows (CI/CD) and using Infrastructure-as-Code (IaC) tools like Terraform. - Experience deploying and managing CSPM and CWP platforms (e.g., Prisma Cloud). - Knowledge of regulatory standards such as SOC 2, ISO 27001, or FedRAMP. - Ability to integrate cloud telemetry into SIEM systems and assist with forensic analysis. - Deep understanding of Kubernetes architecture and cloud network boundaries (VPCs, Security Groups, Transit Gateways). - Preferred credentials include CCSP, AWS Certified Security, or Google Cloud Professional Cloud Security Engineer. - Preferred knowledge includes Cloud Computing, Cloud Storage, Cloud Networking, PaaS services, DevSecOps, Multi-Cloud Security Strategy, Microsoft Defender for Cloud, AWS Security Hub, AKS, EKS, and Threat Modeling. SELECTION PROCESS - No civil service exam is required for this position. - Submission of a resume does not guarantee an interview. - Appointments are subject to oversight approval. - OTI participates in E-Verify. HOW TO APPLY - Go to www.cityjobs/jobs/search and search for Job ID #788725. - Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration. EMPLOYMENT DETAILS - Job Type: Full-Time, Experienced (Non-Manager). - Hours/Shift: Day shift, but may require various shifts including weekends, nights, or evenings due to 24/7 operations. - Work Location: 2 Metro Tech, Brooklyn, NY. - NYC Residency: Not required. - Benefits: Eligible for Public Service Loan Forgiveness (PSLF) and state repayment assistance programs. - Number of Positions: 1. - Classification: Non-Competitive-5. - Posted Until: 09/28/2026. - The City of New York is an inclusive equal opportunity employer.