.png){kind=logo}
Leads application and cloud security architecture, secure design reviews, threat and risk assessments, and security governance. Establishes Cloud Security Posture Management and automated security controls across CI/CD pipelines, infrastructure as code, containers, cloud environments, and software supply chains. Develops security standards and policy-as-code guardrails, communicates risks and mitigations, and influences cross-functional technical teams.
CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services.
We are seeking an Application Security Architect to join our growing technology team.
How You’ll Create Opportunities
The Application Security Architect will bridge application security architecture, engineering, DevOps, and cloud security. In this role, you will lead and support secure design reviews for proprietary and third-party solutions, assess technical and data flows, and identify the security controls needed to protect
CLA’s technology environment.
You will also provide technical governance and automation support for security controls across CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, cloud environments, and the software supply chain. A key focus of this position will be establishing a Cloud Security Posture Management practice that connects cloud infrastructure security with automated development workflows.
In this role, you will:
- Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions.
- Document identified risks, required mitigations, risk owners, exceptions, and residual-risk decisions.
- Review system interaction diagrams and detailed logical, functional, physical, and data-flow diagrams.
- Identify trust boundaries, security boundaries, integration points, administrative interfaces, data stores, and external dependencies.
- Develop reusable security standards, assessment patterns, review templates, control baselines, and architectural guidance.
- Establish and build a Cloud Security Posture Management practice by coordinating the appropriate people, processes, technology, governance, and service expectations.
- Assess cloud permissions, secrets management, deployment architecture, infrastructure as code, container images, orchestration configurations, and cloud-native deployment patterns.
- Identify opportunities to prevent configuration issues and policy violations before deployment through policy-as-code, automated validation, and reusable engineering guardrails.
- Provide technical security leadership across Development, Cloud, Platform, Product, Data, Information Technology, Enterprise Architecture, and Risk teams.
- Connect code, pipeline, identity, integration, data, and cloud architecture risks to practical security controls and business outcomes.
- Distinguish mandatory security requirements from recommendations and risk-based enhancements.
- Escalate unresolved material risks through established risk-acceptance processes.
- Communicate technical risks, required controls, exceptions, ownership, and residual risk to technical and non-technical stakeholders.
- Build strong partnerships, improve developer engagement with Application Security, and influence teams without direct authority.
What You’ll Need
- Experience leading or supporting secure design reviews for application, cloud, commercial, and hybrid solutions.
- Experience reviewing technical architecture, system interaction, and data-flow diagrams.
- Experience with application security architecture, cloud security, DevOps security, and security engineering.
- Knowledge of CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, and software supply-chain security.
- Experience assessing cloud permissions, secrets management, deployment architecture, container images, orchestration configurations, and cloud-native deployment patterns.
- Experience connecting technical security risks to practical controls and business outcomes.
- Ability to communicate technical risks and security requirements to both technical and non-technical stakeholders.
- Ability to build relationships and influence cross-functional teams without direct authority.
Preferred Qualifications
- Professional certification such as CISSP, CCSP, or a comparable security, cloud, DevOps, or architecture credential.
- Experience with Azure cloud services, cloud-native security patterns, and enterprise cloud identity platforms.
- Experience with Black Duck Polaris or a comparable software composition analysis and application security platform.
- Experience with Cloud Security Posture Management, container security, policy-as-code, artifact integrity, secrets management, and automated compliance controls.
- Experience conducting threat modeling, architecture risk analysis, secure design reviews, vulnerability management, and risk-acceptance activities.
- Experience working with NIST security and risk-management frameworks.
- Familiarity with API security, integration platforms, citizen-development governance, and secure container orchestration patterns.
Job Requirements
- 7 years of general IT experience required. 4 of which are with security of IT systems, and 2 with security design/stratgy.
- Bachelor's degree is required. Combination of relevant experience, education, and training may be accepted in lieu of degree.
#LI-JH1
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
Click here to learn about your hiring rights.
Wellness at CLA
To support our CLA family members, we focus on their physical, financial, social, and emotional well-being and offer comprehensive benefit options that include health, dental, vision, 401k and much more.
To view a complete list of benefits, click here.
CLA (CliftonLarsonAllen) Austin, Texas, USA Office
Austin, United States
Similar Jobs
.jpeg)
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Develops and supports CAD tools, engineering workflows, and methodologies for semiconductor memory design. The role involves debugging EDA environments, providing production support, training users, collaborating with design and process teams, and applying software engineering, AI, machine learning, and data-driven techniques to improve design productivity and robustness.
Top Skills:
AICC++CadCmosData ScienceEdaJavaLinuxLispMachine LearningPerlPythonShell ScriptingSkillUnixVisual BasicVlsi
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Own DFT architecture, implementation, flow execution, and signoff for complex HBM base-die SoCs. Responsibilities include scan, MBIST, LBIST, JTAG, ATPG readiness, coverage closure, RTL-to-GDS integration, physical design collaboration, pre- and post-silicon debug, yield analysis, and standardized flow development. The role also advances AI-driven DFT tools and mentors engineers.
Top Skills:
Agentic AiAtpgBoundary ScanCadenceDftDramDrcEda ToolsGen-AiHbmJedecJtagLbistLvsMbistPerlPhysical DesignPythonRtlRtl-To-GdsScan InsertionSiemensSocStaSynopsysSynthesisTcl
Artificial Intelligence • Hardware • Information Technology • Machine Learning
Architects and develops systems software for emerging memory and storage technologies, with emphasis on AI inference stacks and heterogeneous computing. Responsibilities include Linux application and library development, emulator creation, system-level debugging, accelerator programming, performance evaluation, technical leadership, cross-functional collaboration, mentoring, and presenting technical findings. The role requires expertise across AI frameworks, inference engines, operating systems, kernels, hardware interfaces, memory hierarchies, and distributed serving systems.
Top Skills:
CC++CudaCxlDramGdbHbmLinuxNandNvidia DynamoNvlinkNvme SsdOpenclPciePythonRustSglangSyclTensorrt-LlmUalinkVllm
What you need to know about the Austin Tech Scene
Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.
Key Facts About Austin Tech
- Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
- Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
- Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
- Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center
