Breakthru Beverage Group
Architect, Cloud Security
Breakthru Beverage Group, Washington, District of Columbia, us, 20022
Join to apply for the
Architect, Cloud Security
role at
Breakthru Beverage Group .
6 days ago Be among the first 25 applicants
Job Description Summary We are seeking an experienced Cloud Security Architect to manage and improve the design of a security architecture comprised of AWS, multi-cloud, hybrid, and operational technology environments.
Time Type Full time
Remote Type Not specified
Job Family Group Information Technology
Job Responsibilities
Design, engineer, and enhance the security architecture of the organization’s cloud environment as well as networking, local infrastructure, applications, and operational technologies.
Implement and leverage AWS-native security architectures including IAM, KMS, ACM, VPC, CloudTrail, Security Hub, GuardDuty, Macie, Detective, Security Lake, and Control Tower.
Support the re-architecture and migration of Azure workloads to AWS.
Design and enforce Zero Trust security models to ensure protection of cloud and hybrid environments.
Integrate AWS with enterprise security solutions including Zscaler, Splunk, and BeyondTrust.
Collaborate with DevOps and cloud infrastructure teams to integrate security into DevOps pipelines with automation for exposure management, code scanning, and compliance validation.
Define and implement identity and access management (IAM) strategies, including federation, least privilege, just in time access, identity governance, and Zero Trust principles. Integrate with multiple IdPs including Entra ID and SAP IAS.
Establish governance, risk, and compliance (GRC) frameworks for cloud adoption, including policy-as-code and automated compliance monitoring following industry best practices and standards.
Develop templates, accelerators, and reusable security artifacts that improve time-to-value and support consistent governance processes for IT and the business.
Stay current with AWS service releases, regulatory changes, and emerging cyber risks to provide risk management guidance.
Support incident response and forensics in cloud environments with both native logging and detection capabilities and SIEM.
Provide thought leadership via security workshops, executive briefings, and architecture reviews.
Other duties, as assigned by the jobholder’s supervisor, may also be required.
Interview Process
Phone Screen - 30 minutes with Talent Acquisition.
Virtual Video Interview - 30 minutes with Hiring Manager.
Panel Interview (Virtual via Microsoft Teams or In Person) - 45 minutes with Business Partners.
Final Interview (Virtual via Microsoft Teams or In Person) - 30 minutes with Hiring Manager.
Minimum Qualifications
Bachelor's degree in computer science, information systems, or information technology, or equivalent work experience.
Minimum 10 years of IT Security experience, with 5 years focused on AWS architecture.
AWS Solutions Architect – Associate Certification.
CISSP Certification.
Deep expertise in AWS-native and third-party security tools.
Strong understanding of cloud governance, infrastructure as code (IaC), encryption, networking, and identity management.
Strong experience with Snowflake and S/4HANA.
Hands‑on scripting and automation (Python, Terraform).
Strong experience with Splunk.
Experience with multi‑cloud environments (AWS, Azure, M365).
Strong writing and communication skills across technical and executive audiences.
Ability to multi‑task, work independently and/or within a team, pay attention to detail and meet deadlines.
Utilize sound judgement, business acumen and problem‑solving skills and ability to work in a fast‑paced, high‑volume, team environment.
Preferred Qualifications
AWS Solutions Architect – Professional Certification.
CCSP Certification.
Master’s degree.
Physical Requirements
The employee is required to remain in a stationary position at times; communicate, and operate a computer and telephone.
Competencies
May help coordinate the work of junior members of the team.
Resolves issues which are often varied and non‑routine. Undertakes analysis and investigation to solve issues.
Salary and Benefit Statement Annual Salary Range: $126,000.00 – $157,500.00.
This position is eligible for health care benefits, life insurance, time off benefits and participation in the Company’s 401(k) plan.
Equal Employment Opportunity Statement Breakthru Beverage Group is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information and other legally protected characteristics. The EEO is the Law poster is available here. If you need a reasonable accommodation because of a disability for any part of the employment process, please call (708) 298‑3536 and let us know the nature of your request and your contact information.
Seniority Level Mid‑Senior level
Employment Type Full‑time
Job Function Design, Art/Creative, and Information Technology
Industries Wholesale
#J-18808-Ljbffr
Architect, Cloud Security
role at
Breakthru Beverage Group .
6 days ago Be among the first 25 applicants
Job Description Summary We are seeking an experienced Cloud Security Architect to manage and improve the design of a security architecture comprised of AWS, multi-cloud, hybrid, and operational technology environments.
Time Type Full time
Remote Type Not specified
Job Family Group Information Technology
Job Responsibilities
Design, engineer, and enhance the security architecture of the organization’s cloud environment as well as networking, local infrastructure, applications, and operational technologies.
Implement and leverage AWS-native security architectures including IAM, KMS, ACM, VPC, CloudTrail, Security Hub, GuardDuty, Macie, Detective, Security Lake, and Control Tower.
Support the re-architecture and migration of Azure workloads to AWS.
Design and enforce Zero Trust security models to ensure protection of cloud and hybrid environments.
Integrate AWS with enterprise security solutions including Zscaler, Splunk, and BeyondTrust.
Collaborate with DevOps and cloud infrastructure teams to integrate security into DevOps pipelines with automation for exposure management, code scanning, and compliance validation.
Define and implement identity and access management (IAM) strategies, including federation, least privilege, just in time access, identity governance, and Zero Trust principles. Integrate with multiple IdPs including Entra ID and SAP IAS.
Establish governance, risk, and compliance (GRC) frameworks for cloud adoption, including policy-as-code and automated compliance monitoring following industry best practices and standards.
Develop templates, accelerators, and reusable security artifacts that improve time-to-value and support consistent governance processes for IT and the business.
Stay current with AWS service releases, regulatory changes, and emerging cyber risks to provide risk management guidance.
Support incident response and forensics in cloud environments with both native logging and detection capabilities and SIEM.
Provide thought leadership via security workshops, executive briefings, and architecture reviews.
Other duties, as assigned by the jobholder’s supervisor, may also be required.
Interview Process
Phone Screen - 30 minutes with Talent Acquisition.
Virtual Video Interview - 30 minutes with Hiring Manager.
Panel Interview (Virtual via Microsoft Teams or In Person) - 45 minutes with Business Partners.
Final Interview (Virtual via Microsoft Teams or In Person) - 30 minutes with Hiring Manager.
Minimum Qualifications
Bachelor's degree in computer science, information systems, or information technology, or equivalent work experience.
Minimum 10 years of IT Security experience, with 5 years focused on AWS architecture.
AWS Solutions Architect – Associate Certification.
CISSP Certification.
Deep expertise in AWS-native and third-party security tools.
Strong understanding of cloud governance, infrastructure as code (IaC), encryption, networking, and identity management.
Strong experience with Snowflake and S/4HANA.
Hands‑on scripting and automation (Python, Terraform).
Strong experience with Splunk.
Experience with multi‑cloud environments (AWS, Azure, M365).
Strong writing and communication skills across technical and executive audiences.
Ability to multi‑task, work independently and/or within a team, pay attention to detail and meet deadlines.
Utilize sound judgement, business acumen and problem‑solving skills and ability to work in a fast‑paced, high‑volume, team environment.
Preferred Qualifications
AWS Solutions Architect – Professional Certification.
CCSP Certification.
Master’s degree.
Physical Requirements
The employee is required to remain in a stationary position at times; communicate, and operate a computer and telephone.
Competencies
May help coordinate the work of junior members of the team.
Resolves issues which are often varied and non‑routine. Undertakes analysis and investigation to solve issues.
Salary and Benefit Statement Annual Salary Range: $126,000.00 – $157,500.00.
This position is eligible for health care benefits, life insurance, time off benefits and participation in the Company’s 401(k) plan.
Equal Employment Opportunity Statement Breakthru Beverage Group is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information and other legally protected characteristics. The EEO is the Law poster is available here. If you need a reasonable accommodation because of a disability for any part of the employment process, please call (708) 298‑3536 and let us know the nature of your request and your contact information.
Seniority Level Mid‑Senior level
Employment Type Full‑time
Job Function Design, Art/Creative, and Information Technology
Industries Wholesale
#J-18808-Ljbffr