For The Ones Who Get It Done
Cloud Security Architect
Location
Illinois
Posted
52 days ago
Salary
$146.2K - $243.6K / year
Seniority
Senior
Job Description
Cloud Security Architect
Grainger
Title: Cloud Security Architect Location: LAKE FOREST, IL, US, 60045-5202 Work Location Type: Hybrid Req Number 328865 Department: Technology (US) Job Description: About Grainger W.W. Grainger, Inc., is a leading broad line distributor with operations primarily in North America, Japan and the United Kingdom. At Grainger, We Keep the World Working® by serving more than 4.5 million customers worldwide with products and solutions delivered through innovative technology and deep customer relationships. Known for its commitment to service and award-winning culture, the Company had 2024 revenue of $17.2 billion across its two business models. In the High-Touch Solutions segment, Grainger offers approximately 2 million maintenance, repair and operating (MRO) products and services, including technical support and inventory management. Compensation The anticipated base pay compensation range for this position is $146,200.00 – $243,600.00. This role is eligible for an incentive target of up to 20 % or $ , based on the achievement of individual and company performance objectives in accordance with the current terms of the incentive program which are subject to change. "This position is not eligible for any form of sponsorship now or in the future. Individuals requiring sponsorship (e.g. OPT or H1B visa status) should not apply. Only individuals authorized to work in the United States now and for the foreseeable future will be considered for this position." Rewards and Benefits With benefits starting on day one, our programs provide choice and flexibility to meet team members' individual needs, including: - Medical, dental, vision, and life insurance plans with coverage starting on day one of employment and 6 free sessions each year with a licensed therapist to support your emotional wellbeing. - 18 paid time off (PTO) days annually for full-time employees (accrual prorated based on employment start date) and 6 company holidays per year. - 6% company contribution to a 401(k) Retirement Savings Plan each pay period, no employee contribution required. - Employee discounts, tuition reimbursement, student loan refinancing and free access to financial counseling, education, and tools. - Maternity support programs, nursing benefits, and up to 14 weeks paid leave for birth parents and up to 4 weeks paid leave for non-birth parents. Grainger Benefits The pay range provided above is not a guarantee of compensation. The range reflects the potential base pay for this role at the time of this posting based on the job grade for this position. Individual base pay compensation will depend, in part, on factors such as geographic work location and relevant experience and skills. The anticipated compensation range described above is subject to change and the compensation ultimately paid may be higher or lower than the range described above. Grainger reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion at any time, consistent with applicable law. Position Details The Information Security team protects all of Grainger, from our systems to our data across the global company. Our infrastructure is powered by cloud, on-premises, and SaaS platforms that keep Grainger, and our customers, working. We use modern tools and practices to stay ahead of evolving security challenges. The mission of the Security Architecture team is to be the strategic security design partner for Grainger’s technology. As the security architect responsible for Grainger’s cloud platforms, you will be responsible for architecting, advising on, and governing a secure cloud infrastructure supporting business needs. You will support the progressive needs of the business and provide timely, secure and cost-efficient solutions that elevate the company’s cloud security posture. An advanced role, the cloud architect will deliver resilient architectures at scale to support business initiatives. The role requires deep technical knowledge of cloud computing architecture, security principles, and cybersecurity best practices. A cloud security architect is highly technical and proficient in cybersecurity and systems administration across a wide variety of infrastructure types (SaaS, IaaS, PaaS), with a strong understanding of cloud-native patterns including containerization, serverless, and infrastructure as code. A deep level of demonstrated experience with AWS is a requirement, with functional knowledge of Microsoft Azure and Google Cloud required. In this individual contributor role, you will report to the Director of Cybersecurity Architecture and may be based remotely or at our offices in the Chicago area. "This position is not eligible for any form of sponsorship now or in the future. Individuals requiring sponsorship (e.g. OPT or H1B visa status) should not apply. Only individuals authorized to work in the United States now and for the foreseeable future will be considered for this position." You will - Plan, research, and develop security architecture for cloud solutions (SaaS, PaaS, and IaaS), which may include custom in-house solutions and third-party solutions - Define strategies and roadmaps to support security and company technology goals - Communicate the state of cloud security posture to cybersecurity leaders, IT leaders, and other stakeholders through a thoughtful metrics and KPI-driven message - Develop, maintain, and enforce cloud security policies and procedures. Leverage best practices, standards, and baselines such as Cloud Security Alliance Cloud Controls Matrix (CCM), CIS Benchmarks, cloud provider Well-Architected Framework security pillars, and NIST SP 800-series - Work with teams to define requirements, evaluate architecture, analyze trade-offs, and recommend solutions - Create conceptual and logical architecture designs, including cloud security reference architectures and secure landing zone designs - Assess risks through threat modeling and white-boarding exercises with teams - Evaluate products and tools through Proof of Value exercises - Advise product teams on the security implications of their roadmaps - Partner with engineering teams, cloud platform teams, and other peer architecture teams to ensure security is embedded in technical decisions from design through implementation - Define and maintain cloud account/subscription governance, including organizational unit structure, service control policies, and permission boundaries - Design and advise on security architectures for CI/CD pipelines, including secrets management, IaC scanning, container image scanning, and artifact integrity - Architect cloud-native security monitoring and logging strategies, including integration with Grainger’s SIEM/SOAR platform - Evaluate and mature cloud-native security tooling to support detection, prevention, and compliance objectives - Mentor peers and junior architects through design reviews, knowledge sharing, and technical leadership across the security architecture team You have - 5+ years of architecture experience, with at least 3 years focused on cloud environments - 8+ years of information security experience - Bachelor's degree preferred or equivalent work experience - Deep expertise in designing cloud security architectures that support the business needs of large enterprises, with primary depth in AWS and functional proficiency in Microsoft Azure and Google Cloud - Proven experience with zero trust architecture principles, encryption and key management, web application firewalls, data protection, vulnerability management, API security, and Infrastructure as Code security (Terraform, CloudFormation, or equivalent) - Strong understanding of cloud IAM architecture, including AWS IAM policies, service control policies (SCPs), Azure Entra ID conditional access, and federated identity patterns - Experience with cloud-native security tooling, including CNAPP, CSPM, CWPP, and CIEM solutions - Working knowledge of container and Kubernetes security concepts, including image scanning, runtime protection, admission control, network policies, and RBAC - Familiarity with CI/CD pipeline security practices, including shift-left security integration, secrets management, SAST/DAST, and software supply chain security concepts (SBOM, artifact signing) - Familiarity with security frameworks and industry standards such as CIS Benchmarks, CSA CCM, NIST CSF, and cloud provider Well-Architected Frameworks - Working knowledge of AI/ML workload security, including securing data pipelines, model hosting infrastructure, and awareness of frameworks such as OWASP Top 10 for LLMs and MITRE ATLAS - Working technical knowledge within the network security space. Areas of familiarity should include SSE/SASE, SD-WAN, next-generation firewalls, enterprise routing and switching, microsegmentation, web application firewalls, and cloud-adjacent and edge compute - Design and communicate cloud security monitoring and logging architectures, including native cloud provider tools and SIEM/SOAR integration - Relevant certifications preferred: CISSP, CCSP, AWS Solutions Architect, or vendor-specific cloud security certifications (e.g., AWS Security Specialty/Network Specialty) We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex (including pregnancy), national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, protected veteran status or any other protected characteristic under federal, state, or local law. We are proud to be an equal opportunity workplace. We are committed to fostering an inclusive, accessible work environment that includes both providing reasonable accommodations to individuals with disabilities during the application and hiring process as well as throughout the course of one’s employment, should you need a reasonable accommodation during the application and selection process, including, but not limited to use of our website, any part of the application, interview or hiring process, please advise us so that we can provide appropriate assistance.
Related Guides
Related Categories
Related Job Pages
More Cloud Engineer Jobs
Senior SQL Server DBA
Poland and Eastern EuropeXebia is a global tech company with a journey in CEE that started with two Polish companies – PGS Software and GetInData. We are a team of 1,000+ experts delivering top-notch work across cloud, data, and software. We work on impactful projects across various sectors including fintech, e-commerce, aviation, logistics, media, and fashion, helping clients build scalable platforms and cutting-edge applications. Our clients include notable names like McLaren, Aviva, Deloitte, Spotify, Disney, ING, UPS, Tesco, Truecaller, AllSaints, Volotea, Schmitz Cargobull, Allegro, and InPost.
Hello, let’s meet! Your profile: - 10+ years of experience as a Microsoft SQL Server DBA or Developer, - experience with SQL Server (2016/2019/2022), - strong experience with database migrations to AWS (RDS, EC2), - experience with AWS DMS or similar migration tools, - experience with CI/CD pipelines and Git-based workflows, - knowledge of database monitoring tools (e.g., Foglight), - understanding of database performance optimization, HA/DR solutions, and security standards. Nice to have: - experience with Typescript and AWS CDK, - familiarity with ITIL framework and GDPR principles, - experience working in Agile environments, - experience with tools such as ServiceNow and Confluence. Work from the European Union region and a work permit are required. Candidates must have an active VAT status in the EU VIES registry: https://ec.europa.eu/taxation_customs/vies/ Recruitment Process: CV review – HR Call – Interview I – Interview II – Decision
Senior/Principal Cloud .NET Developer (5602)
Poland and Eastern EuropeXebia is a global tech company with a journey in CEE that started with two Polish companies – PGS Software and GetInData. We are a team of 1,000+ experts delivering top-notch work across cloud, data, and software. We work on impactful projects across various sectors including fintech, e-commerce, aviation, logistics, media, and fashion, helping clients build scalable platforms and cutting-edge applications. Our clients include notable names like McLaren, Aviva, Deloitte, Spotify, Disney, ING, UPS, Tesco, Truecaller, AllSaints, Volotea, Schmitz Cargobull, Allegro, and InPost.
Hello, let’s meet! We are Xebia - a place where experts grow. For nearly two decades now, we've been developing digital solutions for clients from many industries and places across the globe. Among the brands we’ve worked with are UPS, McLaren, Aviva, Deloitte, and many, many more. We're passionate about Cloud-based solutions. So much so, that we have a partnership with three of the largest Cloud providers in the business – Amazon Web Services (AWS), Microsoft Azure & Google Cloud Platform (GCP). We even became the first AWS Premier Consulting Partner in Poland. Formerly we were known as PGS Software. In 2021, we joined Xebia Group – a family of interlinked companies driven by the desire to make a difference in the world of technology. Xebia stands for innovation, talented team members, and technological excellence. Xebia means worldwide recognition, and thought leadership. This regularly provides us with the opportunity to work on global, innovative projects. Our mission can be captured in one word: Authority. We want to be recognized as the authority in our field of expertise. What makes us stand out? It's the little details, like our attitude, dedication to knowledge, and the belief in people's potential - emphasizing every team members development. Obviously, these things are not easy to present on paper – so make sure to visit us to see it with your own eyes! Now, we've talked a lot about ourselves – but we'd love to hear more about you. Send us your resume to start the conversation and join the #Xebia. You will be: - collaborating with worldwide teams co-located in Europe, the UK, Asia, - creating architecture, system components, microservices, and in some cases DevOps solutions as well, - experiencing working for Clients from various industries, - working in an agile environment with tools such as GIT, Azure DevOps (may vary by project), Jira, Confluence, and Miro, - be able to participate in internal technical workshops Upskill), guild meetings, external and organized conferences (webinars, SoftwareTalks), integration meetings. Your profile: - 5+ years of experience in web application development, practiced the OOP paradigm, knows and applies SOLID principles, are familiar with .NET Core or .NET 6, - knows what REST is and how to create API according to best practices, - can work with relational databases (SQL Server, PostgreSQL, MySQL/MariaDB/Aurora, Oracle) as well as non-relational (Cosmos DB, Table Storage, DynamoDB), - knowledgeable of the Azure platform; you know some of these: Azure Compute, Azure Storage, Azure Security, Key Vault, Azure Web App, Azure App Insights, Azure Functions, Azure Data Factory, Azure SQL, Event Hub, Even Grid, Service Bus, Queues, - or knowledgeable of the AWS platform; you know a bit of these: S3, SES, SQS, SNS, IAM, KMS, Elastic Beanstalk, EC2, ECS, Lambdas, Step Functions, CloudWatch, Glue, Athena, RDS, Kinesis, - know the basics of Azure or AWS networking, - aware of ElastiCache, Redis or Elasticsearch/Azure Search, - familiar with containerization – i.e., Docker, Kubernetes or AKS/ EKS, - have or are planning to have Azure Certificates (AZ-900, AZ-204, AZ-305) or AWS Certificates (Cloud Practitioner, Developer Associate), - knows how modern IT systems are built: distributed, asynchronous, cloud, serverless, - knows the issues related to the security of internet applications, - comfortable to discuss architectural decisions and proposed design solutions, - understands customer requirements and based on them can deliver business value, - communicates freely in English (B2 level), - work from the European Union region and a work permit are required. Recruitment Process: CV review – HR call – Interview – Client Interview – Decision
Who we are: Yourgi is on a mission to become Earth's most trusted pet care connector, connecting pet parents with a reliable local network of certified professionals, pet resorts, and veterinary centers. Backed by a passionate team, our mission is to make pet care simple, accessible, and joyful for all. Because pets aren't just animals—they're family. We are looking to add a Senior Cloud Engineer to Yourgi our team! LOCATION: Remote REPORTS TO: Director of Platform Services PAY: $130,000 - $155,000 dependent on experience CORE RESPONSIBILITES: - - Design and evolve AWS architecture for scalability, reliability, and cost efficiency - Standardize infrastructure patterns and reusable templates to deploy infrastructure across dev, stage and production environments - Design and maintain build and deployment pipelines - Implement monitoring and alerting (CloudWatch, third-party tools), logging and tracing, health checks and synthetic monitoring - Diagnose and resolve production incidents, performance bottlenecks, lead root-cause analysis and post-incident reviews - Create and manage user accounts for SSO access to internal systems. - Communicate on all open projects and give updates to technology team staff REQUIREMENTS: Education & Experience: - 5+ years AWS serverless architecture and administration - 2+ years Infrastructure as Code - 2+ years Creating CI/CD pipelines for web deployment and dbt - 2+ years IAM and cloud security - 2+ years Cloud networking basics - 2+ years RDS administration Skills: - Effective communication skills. You have outstanding verbal and written communication skills that enable you to speak effectively with anyone and everyone who crosses your path Reliable. - People know that they can rely on you to follow through and make things happen. - Learn quickly, self-starter, and take directions well. - Exceptional troubleshooting skills, detail orientated - Ability to manage multiple projects and meet deadlines. Desired Skills: - Okta configuration - Snowflake, big data administration - Multi-region data center management and disaster recovery Other: - Travel is not required - Must be able to work in front of a computer for long periods of time. - Remote engineers must be able to work during regular US business hours; and must be able to regularly participate on calls via Teams or available to other team members via Teams. PERKS: - Health, vision, dental, long & short-term disability, and Life insurance - A Startup mentality company with stable funding - 401k match - Pet Care discounts - Flexible Time Off - Opportunity to grow your career with a network of like-minded professionals. Yourgi affords equal employment opportunities to employees and applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, age, disability or any other characteristic protected by federal, state or local law. Equal Opportunity Employer Minorities/Women/Veterans/Disabled. Yourgi endeavors to make our employment website and application process accessible to all users and applicants. In doing so, we provide reasonable accommodations to applicants with disabilities. If you have a disability and require a reasonable accommodation or assistance completing the application process, please contact a member of our recruitment team. At Yourgi, we're all about creating a workplace that's bursting with diversity and inclusivity. We don't play favorites or judge folks based on skin color, religion, gender, age, disability, or any other protected characteristics. Our hiring decisions are solely based on what you can bring to the team. So, we're throwing the door wide open for all like-minded candidates who believe in celebrating and honoring diversity and inclusion. Ready to join our pack?
Lead Python Engineer
IT LabsFounded in 2005, IT Labs is an international software tech company, specializing in purpose and process-driven teams for high-performance, innovation, transformation, and efficiency. Our HQ is in Palm Beach Gardens, Florida, and we have teams around the world - the UK, the Netherlands, Brazil, Argentina, Serbia, Croatia, BIH, Montenegro, North Macedonia, and the Middle East. We are constantly growing, and we would love for you to become part of our team!
About the Role IT Labs is seeking a Lead Python Engineer to join a team supporting a major client—a leading digital consulting services company. In this role, you'll combine strong technical expertise in Python and Azure with proven leadership ability, driving the successful design and delivery of scalable software systems. You'll work closely with stakeholders from both IT Labs and the client to ensure excellence in solution architecture, implementation, and team collaboration. What You Will Do - Lead the end-to-end design, development, and deployment of robust Python solutions in Azure cloud environments. - Collaborate directly with client teams to gather requirements and deliver solutions tailored to complex business challenges. - Oversee and mentor a team of engineers, promoting best practices, code quality, and continuous improvement. - Architect, implement, and optimize cloud-native applications and integrations on Azure. - Ensure compliance with security, quality, and governance standards. - Troubleshoot and resolve technical challenges, providing hands-on guidance to the team. - Stay current with emerging technology trends relevant to Python engineering and Azure cloud solutions. Requirements - Demonstrated leadership experience leading engineering teams or complex projects. - Proven track record as a Lead Python Engineer or Senior Python Developer, with expertise in delivering production solutions. - Deep hands-on experience with Python and Azure cloud services (App Services, Azure Functions, Azure Storage, etc.). - Strong architectural and problem-solving skills, especially in cloud-native environments. - Familiarity with software development best practices, code reviews, and technical mentoring. - Excellent communication and stakeholder management abilities. - Fluent in English. Working Conditions & Benefits - Individual Contract or B2B Contract options - PTO - Fully remote work - Professional development opportunities - Collaborative, international environment Our values We are a company that seeks the best for both our employees and clients, reaching beyond expectations in turning dreams into reality. Our way of working is rooted in our core values (Integrity, Excellence, Proactivity, Innovation, and People), with an expectation that our future colleagues will make these their second nature in their everyday work and life. We don’t ask for perfection, but we do appreciate people motivated to better themselves in every conceivable aspect. About IT Labs Founded in 2005, IT Labs is an international software tech company, specializing in purpose and process-driven teams for high-performance, innovation, transformation, and efficiency. Our HQ is in Palm Beach Gardens, Florida, and we have teams around the world - the UK, the Netherlands, Brazil, Argentina, Serbia, Croatia, BIH, Montenegro, North Macedonia, and the Middle East. We are constantly growing, and we would love for you to become part of our team!
