10871 - Cloud Security Architect "SAE"

Cloud Security Architect  
Location – Irvine, CA

Company Overview
Hyundai AutoEver America (HAEA) , the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.
HAEA offers a truly global and collaborative environment. Here, you’ll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.
At HAEA, we understand that IT is the cornerstone of today’s fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai’s Global Headquarters and North American operations.
If you’re passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that’s driving the future of automotive innovation.

What You Will Be Doing
The Cloud Security Architect is responsible for defining, evolving, and governing the enterprise Cloud Security Architecture across all cloud service providers. This role sits within the Security Architecture and Engineering organization and serves as the technical authority for cloud security design, standards, and patterns across AWS, Azure, and GCP.

The architect owns the strategic direction of the Cloud Security Standard, ensures consistent security logging and monitoring architecture, and defines the organization’s approach to Cloud Security Posture Management (CSPM) at scale. This role partners closely with Cloud Engineering, Platform, Application, and Security Operations teams to ensure secure-by-design cloud adoption without impeding delivery velocity. The key responsibilities of this role are as described below:

Cloud Security Architecture & Strategy

• Define and maintain the Cloud Security Architecture for AWS, Azure, and GCP environments.
• Establish secure reference architectures, design patterns, and guardrails for:
  • Identity and access management
  • Network segmentation and connectivity
  • Data protection and encryption
  • Workload and platform security
• Translate threat models, risk requirements, and business needs into actionable cloud security architecture.

Cloud Security Standards Ownership

• Own the Cloud Security Standard across all cloud providers, including:
  • Strategic direction
  • Technical depth and consistency
  • Lifecycle management and iteration
• Ensure the standard is:
  • Provider-aware yet provider-agnostic where possible
  • Aligned with evolving cloud services and architectures
  • Consistently adopted through design reviews, patterns, and automation
• Provide architectural guidance and risk issue and exceptions analysis as part of the Risk Operation Processes, when deviations are required.

Logging, Monitoring & Detection Architecture

• Define the cloud logging and monitoring architecture across AWS, Azure, and GCP.
• Ensure cloud-native and security-relevant logs are:
  • Standardized across providers
  • Reliably ingested into centralized log management and SIEM platforms
  • Structured to support detection engineering, incident response, and forensic analysis
• Partner with Security Operations to align logging architecture with detection and response use cases.

Cloud Security Posture Management (CSPM) Architecture

• Define the organization’s CSPM strategy and architecture across multi-cloud environments.
• Establish:
  • CSPM policy baselines
  • Risk-based prioritization models
  • Integration patterns with risk and remediation workflows
• Ensure CSPM capabilities scale with cloud adoption and provide meaningful security signal rather than noise.
• Guide engineering teams on remediation patterns and sustainable control implementation.

Cross-Functional Influence & Governance

• Act as a trusted security architecture advisor to:
  • Customers
  • Cloud Platform and Infrastructure teams
  • Application and DevOps teams
  • Integrated Risk Management and Audit partners
• Lead cloud security design reviews and architecture discussions.
• Support risk assessments, audits, and regulatory inquiries related to cloud security architecture.

Basic Qualifications:

• Experience: 10+ years of experience in Cloud Security, Security Architecture, or Cloud Infrastructure, with significant architecture responsibility. Deep hands-on experience designing secure architectures in AWS, Azure, and GCP. Demonstrated experience defining and governing Cloud Security Standards.
• Education : Bachelor’s degree in Cybersecurity, Information Technology, Computer science or a related field.
• Technical Expertise : Strong experience architecting cloud logging pipelines and SIEM integrations for security operations. Proven expertise designing and operating Cloud Security Posture Management (CSPM) at enterprise scale. Strong understanding of Cloud-native security services, Identity, networking, and data protection in cloud environments, and Cloud threat models and attack paths. Strong troubleshooting and collaboration skills.
• Language Skills : Excellent stakeholder management and communication skills. Proficient in English for effective communication and coordination.

Preferred Qualifications:

• Experience : Hands on experience with CSPM tools such as Prisma Cloud, Wiz, Lacework or similar. Architecture experience in large-scale, multi-cloud enterprise environments. A working understanding of cloud security frameworks and benchmarks (e.g. CIS).
• Education and Certifications : Masters degree in Cybersecurity, Information Technology, Computer Science or a related discipline is preferred. Industry-recognized credentials such as CISSP, CISM, or cloud specific certifications for AWS, Azure or GCP security are highly desirable.

• Language Skills : Bi-lingual in English and Korean language proficiency is preferred to support global coordination and communication.

Team Culture:
The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed.

Base Salary Range: $150,000 - $185,000

Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws.Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws.