Cloud Security Architect Jobs in California
Cloud Security Architect jobs in California are among the most active in the country, concentrated in enterprise technology, defense contracting, financial services, and healthcare IT, with openings at every level from early-career security engineers stepping into architecture roles to senior principal architects leading cloud governance programs. The heaviest hiring is in the San Francisco Bay Area, Los Angeles, and San Diego, where companies like Google, Northrop Grumman, and Wells Fargo maintain large security engineering teams. The most in-demand specialties are zero-trust architecture, cloud-native security for AWS and Azure environments, and DevSecOps integration. Find a role that fits below and apply directly.
Find Cloud Security Architect JobsOverview
Showing 5 of 19+ Cloud Security Architect jobs
INTRODUCTION
Cloud Security Architect
Must Have Technical/Functional Skills
- Strong expertise in AWS cloud security architecture including IAM, KMS, GuardDuty, and CloudTrail.
- Deep understanding of AWS Landing Zone, SCPs, governance, and enterprise security guardrails.
- Experience with security for custom applications including vulnerability identification and remediation.
- Proficiency with VAPT tools such as Nessus, Qualys, Burp Suite, Fortify, and Checkmarx.
- Strong understanding of WAF, firewall management, IDS/IPS, and network segmentation.
- Knowledge of OS-level security for Windows Server 2016–2025 and RHEL 7/8/9.
- Familiarity with securing Java, .NET, TIBCO ESB, and integration-heavy workloads.
- Understanding of database security for Oracle 19c, Exadata on AWS, and SQL Server.
- Ability to apply Zero Trust, least privilege, encryption, and secure-by-design principles.
- Strong collaboration skills across infra, app, DB, network, and DevOps teams.
Roles & Responsibilities
- Lead cloud security architecture for the Data Center Exit migration to AWS EC2.
- Design and implement AWS Landing Zone security including IAM guardrails, SCPs, and logging.
- Conduct application and infra vulnerability assessments and define remediation plans.
- Implement WAF rules, firewall policies, secure segmentation, and endpoint protection.
- Validate authentication, authorization, and encryption models for all migrated workloads.
- Support secure deployment practices, code reviews, and remediation of development gaps.
- Integrate SIEM systems with AWS native security tools for continuous monitoring.
- Define and enforce cloud security baselines aligned with CIS, NIST, and ISO controls.
- Lead penetration testing cycles and coordinate mitigation activities.
- Produce security HLD/LLD, risk assessments, and operational security runbooks.
Cloud Experience Needed
- Hands-on experience designing secure AWS multi-account Landing Zones and guardrail policies.
- Strong understanding of EC2 security, IAM, encryption, and identity federation models.
- Integration knowledge for Oracle Exadata on AWS, SQL Server, and middleware security flows.
- Experience with AWS WAF, Shield, GuardDuty, Security Hub, and detective controls.
- Ability to design security for EKS workloads including pod/network policies and image scanning.
- Understanding of security in hybrid cloud migrations and AWS migration tooling.
Salary Range
$120,000-$140,000 a year
LOCATION
Irvine, CA
Job Function
TECHNOLOGY
Role
Technical Architect
Job Id
417479
Desired Skills
Cloud Security
Desired Candidate Profile
Qualifications: BACHELOR OF COMPUTER SCIENCE
INTRODUCTION
Cloud Security Architect
Must Have Technical/Functional Skills
- Strong expertise in AWS cloud security architecture including IAM, KMS, GuardDuty, and CloudTrail.
- Deep understanding of AWS Landing Zone, SCPs, governance, and enterprise security guardrails.
- Experience with security for custom applications including vulnerability identification and remediation.
- Proficiency with VAPT tools such as Nessus, Qualys, Burp Suite, Fortify, and Checkmarx.
- Strong understanding of WAF, firewall management, IDS/IPS, and network segmentation.
- Knowledge of OS-level security for Windows Server 2016–2025 and RHEL 7/8/9.
- Familiarity with securing Java, .NET, TIBCO ESB, and integration-heavy workloads.
- Understanding of database security for Oracle 19c, Exadata on AWS, and SQL Server.
- Ability to apply Zero Trust, least privilege, encryption, and secure-by-design principles.
- Strong collaboration skills across infra, app, DB, network, and DevOps teams.
Roles & Responsibilities
- Lead cloud security architecture for the Data Center Exit migration to AWS EC2.
- Design and implement AWS Landing Zone security including IAM guardrails, SCPs, and logging.
- Conduct application and infra vulnerability assessments and define remediation plans.
- Implement WAF rules, firewall policies, secure segmentation, and endpoint protection.
- Validate authentication, authorization, and encryption models for all migrated workloads.
- Support secure deployment practices, code reviews, and remediation of development gaps.
- Integrate SIEM systems with AWS native security tools for continuous monitoring.
- Define and enforce cloud security baselines aligned with CIS, NIST, and ISO controls.
- Lead penetration testing cycles and coordinate mitigation activities.
- Produce security HLD/LLD, risk assessments, and operational security runbooks.
Cloud Experience Needed
- Hands-on experience designing secure AWS multi-account Landing Zones and guardrail policies.
- Strong understanding of EC2 security, IAM, encryption, and identity federation models.
- Integration knowledge for Oracle Exadata on AWS, SQL Server, and middleware security flows.
- Experience with AWS WAF, Shield, GuardDuty, Security Hub, and detective controls.
- Ability to design security for EKS workloads including pod/network policies and image scanning.
- Understanding of security in hybrid cloud migrations and AWS migration tooling.
Salary Range
$120,000-$140,000 a year
LOCATION
Irvine, CA
Job Function
TECHNOLOGY
Role
Technical Architect
Job Id
417479
Desired Skills
Cloud Security
Desired Candidate Profile
Qualifications: BACHELOR OF COMPUTER SCIENCE
See All 19 Cloud Security Architect Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find Cloud Security Architect JobsCloud Security Architect Jobs by City in California
Where California roles are concentrated, by current openings.
Cloud Security Architect Job Market in California
A snapshot from current California openings, updated as new roles post.
Who's Hiring
- Upwind Security2
- Veeam Software2
- Adobe1
- Cadence1
- Cadence Design Systems1
Top Industries Hiring
- Technology & Software9
- Electronics & Hardware4
- Automotive1
- Banking & Financial Services1
- Construction & Real Estate1
What California Employers Look For
The qualifications that appear most often in cloud security architect jobs across California.
- Bachelor's degree in computer science, information security, or a related field required
- Industry certifications such as CCSP, CISSP, or AWS Security Specialty strongly preferred
- Five or more years of hands-on experience designing cloud security architectures at scale
- Deep knowledge of AWS, Azure, or Google Cloud Platform security controls and services
- Experience with zero-trust frameworks, IAM, and cloud-native security tooling
- Familiarity with California Consumer Privacy Act compliance and data protection requirements
Cloud Security Architect Jobs in California: Frequently Asked Questions
How do you become a cloud security architect in California?
The typical path starts with a degree in computer science, cybersecurity, or information systems, followed by several years in cloud engineering, security operations, or network security roles. California does not issue a state license for cloud security architects, so employers rely on industry credentials. Earning the Certified Cloud Security Professional or CISSP certification demonstrates the depth of knowledge most California hiring teams expect before promoting someone into an architecture role.
How much do cloud security architects make in California?
Cloud security architects in California earn a median of about $158,870 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $97,070 for the lowest 10% to over $224,930 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire cloud security architects in California?
Employers hiring cloud security architects in California right now include Upwind Security, Veeam Software, and Adobe, based on current listings on Migrate Mate as of June 2026. California's concentration of technology headquarters, defense primes, and large financial institutions means hiring activity is spread across enterprise, government contractor, and cloud-native environments throughout the state.
Which California cities have the most cloud security architect jobs?
San Francisco, San Jose, and Irvine are the California cities with the most cloud security architect openings. The Bay Area leads because of its density of cloud platform companies, cybersecurity vendors, and enterprise technology headquarters, while Los Angeles draws demand from media, aerospace, and financial services firms, and San Diego's concentration of defense contractors and biotech companies sustains consistent openings as well.
Are there remote cloud security architect jobs in California?
Yes, and more than most fields. About 47% of cloud security architect openings tied to California are remote or hybrid as of June 2026, reflecting how much of the work involves designing policies, reviewing configurations, and advising engineering teams rather than managing physical hardware. Architecture, governance, and advisory work tends to travel well, while hands-on implementation tied to classified or regulated environments is more likely to require on-site presence.
How can I get hired as a cloud security architect in California with little or no experience?
The most realistic entry path is moving laterally from a cloud engineering, systems administration, or security analyst role into security-focused work, then building toward architecture over time. Large California employers in technology and defense, including hyperscalers with Bay Area campuses and San Diego-based defense contractors, regularly hire associate security engineers who can grow into architecture. Earning the AWS Certified Security Specialty or the Google Professional Cloud Security Engineer certification, combined with a portfolio of documented architecture decisions or threat-model exercises, signals readiness for California employers even without a formal architect title.
Where can I find and apply to cloud security architect jobs in California?
You can find and apply to cloud security architect jobs in California on Migrate Mate, which lists current California openings. Find roles that fit your experience and apply directly to employers through the listings.
See All 19 Cloud Security Architect Jobs in California
Find roles in California that match your experience and apply in just a few clicks.
Find Cloud Security Architect Jobs