Senior Cloud Security Engineer

ZS is a place where passion changes lives. As a management consulting and technology firm focused on improving life and how we live it, we transform ideas into impact by bringing together data, science, technology and human ingenuity to deliver better outcomes for all. Here you'll work side-by-side with a powerful collective of thinkers and experts shaping life-changing solutions for patients, caregivers and consumers, worldwide. ZSers drive impact by bringing a client-first mentality to each and every engagement. We partner collaboratively with our clients to develop custom solutions and technology products that create value and deliver company results across critical areas of their business. Bring your curiosity for learning, bold ideas, courage and passion to drive life-changing impact to ZS.
Senior Multicloud Security Architect
We are looking for a highly experienced Senior Multicloud Security Architect with a strong focus on Azure cloud security, solid multicloud experience (AWS/GCP), and AI-driven security capabilities. You will define, design, and implement security architectures that protect business-critical systems and data in cloud environments. You will work with engineering, DevSecOps, and cybersecurity teams to ensure secure adoption of cloud services, secure use of AI models, and enterprise-grade security automation.
What you'll do: Senior Cloud Security Engineer in the Enterprise will...

• Lead design and implementation of secure cloud architectures across Azure and other clouds (AWS/GCP).
• Define security standards, policies, and blueprints for cloud adoption.
• Establish and enforce security controls for networking, IAM, encryption, workload protection, and identity.
• Design and implement secure automation (IaC, CI/CD integration, cloud hardening).
• Lead cloud security reviews, threat modeling, and risk assessments.
• Monitor cloud environments for anomalies, misconfigurations, and threats; drive remediation.
• Integrate AI/ML-enabled security analytics and threat detection tools.
• Use AI for cloud security automation, anomaly detection, and risk prioritization.
• Work with AI/ML teams to ensure secure model development, deployment, and governance (data protection, model integrity, adversarial considerations).
• Partner with cross-functional teams (DevOps, Engineering, Product, Compliance) to ensure security by design.
• Act as a security SME; mentor and guide engineers on secure coding and architecture approaches.
• Represent security architecture in design reviews, executive briefings, and technical discussions.

What you'll bring:

• Bachelor's or Master's degree in Computer Science, Cybersecurity, IT, or related field.
• 6-7+ years in cloud security, security architecture, or engineering roles.
• Deep expertise in Microsoft Azure security services (Azure AD, Azure Security Center, Defender, Sentinel, etc.).
• Hands-on experience with IaC (Terraform/ARM/Bicep), automation (PowerShell/CLI), container security (AKS).
• Strong foundation in security design patterns, Zero-Trust principles, IAM, network segmentation, encryption.
• Experience across multicloud (Azure + AWS and/or GCP) security architectures.
• Preferred certifications: Microsoft Certified: Azure Security Engineer / Azure Solutions Architect, AWS Security Specialty, AI/Data security related certification advantage
• Practical experience applying AI/ML for security (anomaly detection, SIEM/SOAR automation, AI-assisted threat intelligence).
• Understanding of security risks around AI model use, data governance, and defensible ML-enabled systems.
• Fluency in English
• Client-first mentality
• Intense work ethic
• Collaborative spirit and problem-solving approach

How you'll grow:

• Cross-functional skills development & custom learning pathways
• Milestone training programs aligned to career progression opportunities
• Internal mobility paths that empower growth via s-curves, individual contribution and role expansions

Perks & Benefits:
ZS offers a comprehensive total rewards package including health and well-being, financial planning, annual leave, personal growth and professional development. Our robust skills development programs, multiple career progression options and internal mobility paths and collaborative culture empowers you to thrive as an individual and global team member.
Hybrid working model:
We are committed to giving our employees a flexible and connected way of working. A flexible and connected ZS allows us to combine work from home and on-site presence at clients/ZS offices for the majority of our week. The magic of ZS culture and innovation thrives in both planned and spontaneous face-to-face connections.
Travel:
Travel is a requirement at ZS for client facing ZSers; business needs of your project and client are the priority. While some projects may be local, all client-facing ZSers should be prepared to travel as needed. Travel provides opportunities to strengthen client relationships, gain diverse experiences, and enhance professional growth by working in different environments and cultures.
Considering applying?
At ZS, we honor the visible and invisible elements of our identities, personal experiences, and belief systems-the ones that comprise us as individuals, shape who we are, and make us unique. We believe your personal interests, identities, and desire to learn are integral to your success here. We are committed to building a team that reflects a broad variety of backgrounds, perspectives, and experiences. Learn more about our inclusion and belonging efforts and the networks ZS supports to assist our ZSers in cultivating community spaces and obtaining the resources they need to thrive.
If you're eager to grow, contribute, and bring your unique self to our work, we encourage you to apply.
ZS is an equal opportunity employer and is committed to providing equal employment and advancement opportunities without regard to any class protected by applicable law.
To complete your application:
Candidates must possess or be able to obtain work authorization for their intended country of employment. An on-line application, including a full set of transcripts (official or unofficial), is required to be considered.
NO AGENCY CALLS, PLEASE.
Find Out More At:
www.zs.com