Cloud & AI Security Architect
HybridRoma, Lombardia, Italian Republic
Job Summary
Architect and implement secure cloud foundations, including landing zones, identity, network segmentation, and key management. Engineer cloud security controls and automate compliance validation using policy-as-code, while building AI-powered security capabilities like investigation copilots, automated alert enrichment, and anomaly detection. Design secure GenAI architectures with RAG patterns, model gateway controls, and prompt protections. Integrate enterprise security platforms such as SIEM/SOAR, CNAPP, and CIEM into cohesive automated workflows. Develop reusable assets and reference implementations to support repeatable delivery. Collaborate with client teams to operationalize solutions and ensure adoption, while supporting DevSecOps practices for secure CI/CD, IaC scanning, and container security. Conduct thorough security assessments and audits to drive enhancements to the organization's security posture.
Required Qualifications
- 5+ years of experience in cybersecurity and/or cloud security with strong hands-on engineering exposure
- Practical experience with AWS/Azure/GCP security services and cloud-native patterns
- Understanding of cloud logging/telemetry, encryption and key management, network security, identity and access controls
- Experience prototyping or delivering AI-enabled solutions (analytics, automation, copilots, detection acceleration)
- Familiarity with RAG, embeddings, secure prompt/data handling, and AI telemetry
- Exposure to MLOps/LLMOps practices (deployment, evaluation, drift/quality monitoring, change control)
- Familiarity with SIEM/SOAR engineering, playbook design, API integrations, and workflow automation
- Scripting/engineering skills (e.g., Python) and comfort working with APIs and data pipelines
- IaC (Terraform, CloudFormation, ARM/Bicep), CI/CD integration, container/Kubernetes security exposure
- Ability to produce implementable designs (diagrams, patterns, reference implementations) and support delivery teams through build and operationalization
- Cloud certifications (architect/security)
- Security certifications (CCSP/CCSK, CISSP, or equivalent)
Desired Qualifications
- Certifications (held or targeted)
- Cloud certifications (architect/security)
- Security certifications (CCSP/CCSK, CISSP, or equivalent) are a plus
- Exposure to MLOps/LLMOps practices (deployment, evaluation, drift/quality monitoring, change control) is a plus
- Familiarity with SIEM/SOAR engineering, playbook design, API integrations, and workflow automation
- Scripting/engineering skills (e.g., Python) and comfort working with APIs and data pipelines
- IaC (Terraform, CloudFormation, ARM/Bicep), CI/CD integration, container/Kubernetes security exposure
- Ability to produce implementable designs (diagrams, patterns, reference implementations) and support delivery teams through build and operationalization
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.