Cloud Security Architect Jobs in USA with Visa Sponsorship
Cloud Security Architect roles attract strong H-1B visa sponsorship from major tech employers and financial institutions, given the specialty occupation classification is well-established. Most roles require a bachelor's degree in computer science, cybersecurity, or a related field, and employers routinely sponsor both new hires and transfers. For detailed occupation requirements, see the O*NET profile.
See All Cloud Security Architect JobsOverview
Showing 5 of 143+ Cloud Security Architect jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 143+ Cloud Security Architect jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cloud Security Architect roles.
Get Access To All JobsINTRODUCTION
Huron is redefining what a global consulting organization can be. Advancing new ideas every day to build even stronger clients, individuals and communities. We’re helping our clients find new ways to drive growth, enhance business performance and sustain leadership in the markets they serve. And, we’re developing strategies and implementing solutions that enable the transformative change they need to own their future.
As a member of the Huron corporate team, you’ll help to evolve our business model to stay ahead of market forces, industry trends and client needs. Our accounting, finance, human resources, IT, legal, marketing and facilities management professionals work collaboratively to support Huron’s collective strategies and enable real transformation to produce sustainable business results.
Join our team and create your future.
As a senior member of the internal security organization, you will play a key role in designing and validating secure architectures across cloud and hybrid environments. You will perform security architecture assessments, identify and prioritize security gaps, and help shape the organization’s overall security posture. This role requires a self-directed professional who can analyze and document complex environments with minimal supervision, translate findings into actionable improvements, and partner effectively with business stakeholders to implement controls without disrupting operations.
While the primary focus is cloud security, this role functions as a subject matter expert across multiple security domains and contributes directly to strategic security initiatives and roadmaps. This is an internally facing position and not customer-facing.
SECURITY ARCHITECTURE & DESIGN
- Lead security architecture assessments for new and existing applications, systems, and integrations across cloud and hybrid environments.
- Partner with product engineering, DevOps, and compliance teams to develop secure architecture patterns that address data protection, access control, network segmentation, and resilience.
- Participate in threat modeling exercises to proactively identify security risks and guide secure design decisions.
- Assess and validate security requirements for new and emerging technologies, including Artificial Intelligence (AI) services and platforms.
CLOUD SECURITY & POSTURE MANAGEMENT
- Serve as the primary subject matter expert for cloud security, with a strong emphasis on Microsoft Azure. Evaluate and improve configurations across identity, networking, compute, storage, and platform services.
- Analyze and document the current cloud environment, identify security gaps, and develop prioritized remediation roadmaps.
- Design and implement cloud security policies, and guardrails using cloud-native tooling (e.g., Azure Policy, AWS Service Control Policies).
AUTOMATION & INFRASTRUCTURE AS CODE
- Author scripts and automation (Python, PowerShell, or similar programming languages) to audit, monitor, and remediate undesirable configurations within the environment.
- Design and implement Infrastructure as Code (IaC) to enforce security baselines, automate deployments, and ensure repeatable, auditable configurations.
CROSS-DOMAIN SECURITY EXPERTISE
- Function as a subject matter expert across multiple security domains including cloud security posture management, identity and access management (IAM), and server/endpoint protection.
- Provide input into strategic security initiatives and roadmaps, helping shape the direction of the security program.
- Stay current with emerging threats and industry trends. Assist with monitoring and evaluating the effectiveness of information security safeguards and remediating discovered gaps.
INCIDENT RESPONSE & COLLABORATION
- Occasionally serve as a subject matter expert during incident response activities, providing expertise in root cause analysis and remediation.
- Coordinate with business stakeholders to ensure that the introduction or enhancement of security controls does not adversely impact operations.
BASIC QUALIFICATIONS
- Bachelor’s degree or equivalent work experience in Computer Science, Cybersecurity, Information Systems, or a related field.
- 8+ years of hands-on information security experience, with at least 3 years in a dedicated security architecture role.
- Strong experience with Microsoft Azure security services and architecture. Demonstrable ability to evaluate and secure configurations across identity, networking, compute, storage, and platform services.
- Proficiency in at least one scripting or programming language (Python or PowerShell preferred; other languages acceptable).
- Proven ability to design and implement Infrastructure as Code (IaC) for security automation and baseline enforcement.
- Strong understanding of regulatory and compliance frameworks such as ISO 27001, NIST, HITRUST, and/or SOC 2.
- Proficiency with authentication and authorization protocols such as SAML, OAuth/OIDC, and LDAP.
- Demonstrated ability to work independently, analyze complex environments, and produce clear, actionable documentation with minimal supervision.
- Excellent communication and interpersonal skills, with the ability to collaborate across technical and non-technical teams and to influence without authority.
PREFERRED QUALIFICATIONS
- Experience with AWS and/or Oracle Cloud Infrastructure in addition to Azure.
- Experience with Microsoft 365, specifically Entra ID, Conditional Access, and Privileged Identity Management (PIM).
- Networking and firewalling experience, including implementation of next-generation firewalls (NGFW) in cloud environments.
- Experience securing microservices, serverless, and container-based architectures.
- Experience with securing AI/ML services and platforms, with a focus on data privacy, access control, and secure model deployment.
- Relevant certifications such as Azure Security Engineer (AZ-500), Azure Solutions Architect (AZ-305 or AZ-104), AWS Security Specialty, AWS Solutions Architect, or similar.
COMPENSATION
- The estimated base salary for this job is $140,000 - $190,000 USD. The range represents a good faith estimate of the range that Huron reasonably expects to pay for this job at the time of the job posting. The actual salary paid to an individual will vary based on multiple factors, including but not limited to specific skills or certifications, years of experience, market changes, and required travel. This job is also eligible to participate in Huron’s annual incentive compensation program, which reflects Huron’s pay for performance philosophy. Inclusive of annual incentive compensation opportunity, the total estimated compensation range for this job is $161,000 - $237,500 USD. The job is also eligible to participate in Huron’s benefit plans which include medical, dental and vision coverage and other wellness programs. The salary range information provided is in accordance with applicable state and local laws regarding salary transparency that are currently in effect and may be implemented in the future.
POSITION LEVEL
Manager
COUNTRY
United States of America
INTRODUCTION
Huron is redefining what a global consulting organization can be. Advancing new ideas every day to build even stronger clients, individuals and communities. We’re helping our clients find new ways to drive growth, enhance business performance and sustain leadership in the markets they serve. And, we’re developing strategies and implementing solutions that enable the transformative change they need to own their future.
As a member of the Huron corporate team, you’ll help to evolve our business model to stay ahead of market forces, industry trends and client needs. Our accounting, finance, human resources, IT, legal, marketing and facilities management professionals work collaboratively to support Huron’s collective strategies and enable real transformation to produce sustainable business results.
Join our team and create your future.
As a senior member of the internal security organization, you will play a key role in designing and validating secure architectures across cloud and hybrid environments. You will perform security architecture assessments, identify and prioritize security gaps, and help shape the organization’s overall security posture. This role requires a self-directed professional who can analyze and document complex environments with minimal supervision, translate findings into actionable improvements, and partner effectively with business stakeholders to implement controls without disrupting operations.
While the primary focus is cloud security, this role functions as a subject matter expert across multiple security domains and contributes directly to strategic security initiatives and roadmaps. This is an internally facing position and not customer-facing.
SECURITY ARCHITECTURE & DESIGN
- Lead security architecture assessments for new and existing applications, systems, and integrations across cloud and hybrid environments.
- Partner with product engineering, DevOps, and compliance teams to develop secure architecture patterns that address data protection, access control, network segmentation, and resilience.
- Participate in threat modeling exercises to proactively identify security risks and guide secure design decisions.
- Assess and validate security requirements for new and emerging technologies, including Artificial Intelligence (AI) services and platforms.
CLOUD SECURITY & POSTURE MANAGEMENT
- Serve as the primary subject matter expert for cloud security, with a strong emphasis on Microsoft Azure. Evaluate and improve configurations across identity, networking, compute, storage, and platform services.
- Analyze and document the current cloud environment, identify security gaps, and develop prioritized remediation roadmaps.
- Design and implement cloud security policies, and guardrails using cloud-native tooling (e.g., Azure Policy, AWS Service Control Policies).
AUTOMATION & INFRASTRUCTURE AS CODE
- Author scripts and automation (Python, PowerShell, or similar programming languages) to audit, monitor, and remediate undesirable configurations within the environment.
- Design and implement Infrastructure as Code (IaC) to enforce security baselines, automate deployments, and ensure repeatable, auditable configurations.
CROSS-DOMAIN SECURITY EXPERTISE
- Function as a subject matter expert across multiple security domains including cloud security posture management, identity and access management (IAM), and server/endpoint protection.
- Provide input into strategic security initiatives and roadmaps, helping shape the direction of the security program.
- Stay current with emerging threats and industry trends. Assist with monitoring and evaluating the effectiveness of information security safeguards and remediating discovered gaps.
INCIDENT RESPONSE & COLLABORATION
- Occasionally serve as a subject matter expert during incident response activities, providing expertise in root cause analysis and remediation.
- Coordinate with business stakeholders to ensure that the introduction or enhancement of security controls does not adversely impact operations.
BASIC QUALIFICATIONS
- Bachelor’s degree or equivalent work experience in Computer Science, Cybersecurity, Information Systems, or a related field.
- 8+ years of hands-on information security experience, with at least 3 years in a dedicated security architecture role.
- Strong experience with Microsoft Azure security services and architecture. Demonstrable ability to evaluate and secure configurations across identity, networking, compute, storage, and platform services.
- Proficiency in at least one scripting or programming language (Python or PowerShell preferred; other languages acceptable).
- Proven ability to design and implement Infrastructure as Code (IaC) for security automation and baseline enforcement.
- Strong understanding of regulatory and compliance frameworks such as ISO 27001, NIST, HITRUST, and/or SOC 2.
- Proficiency with authentication and authorization protocols such as SAML, OAuth/OIDC, and LDAP.
- Demonstrated ability to work independently, analyze complex environments, and produce clear, actionable documentation with minimal supervision.
- Excellent communication and interpersonal skills, with the ability to collaborate across technical and non-technical teams and to influence without authority.
PREFERRED QUALIFICATIONS
- Experience with AWS and/or Oracle Cloud Infrastructure in addition to Azure.
- Experience with Microsoft 365, specifically Entra ID, Conditional Access, and Privileged Identity Management (PIM).
- Networking and firewalling experience, including implementation of next-generation firewalls (NGFW) in cloud environments.
- Experience securing microservices, serverless, and container-based architectures.
- Experience with securing AI/ML services and platforms, with a focus on data privacy, access control, and secure model deployment.
- Relevant certifications such as Azure Security Engineer (AZ-500), Azure Solutions Architect (AZ-305 or AZ-104), AWS Security Specialty, AWS Solutions Architect, or similar.
COMPENSATION
- The estimated base salary for this job is $140,000 - $190,000 USD. The range represents a good faith estimate of the range that Huron reasonably expects to pay for this job at the time of the job posting. The actual salary paid to an individual will vary based on multiple factors, including but not limited to specific skills or certifications, years of experience, market changes, and required travel. This job is also eligible to participate in Huron’s annual incentive compensation program, which reflects Huron’s pay for performance philosophy. Inclusive of annual incentive compensation opportunity, the total estimated compensation range for this job is $161,000 - $237,500 USD. The job is also eligible to participate in Huron’s benefit plans which include medical, dental and vision coverage and other wellness programs. The salary range information provided is in accordance with applicable state and local laws regarding salary transparency that are currently in effect and may be implemented in the future.
POSITION LEVEL
Manager
COUNTRY
United States of America
See all 143+ Cloud Security Architect jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cloud Security Architect roles.
Get Access To All JobsTips for Finding Cloud Security Architect Jobs
Target employers with a CISA or FedRAMP compliance mandate
Federal contractors and regulated financial institutions have non-negotiable cloud security requirements, which makes them more likely to sponsor and retain specialized architects. Their compliance obligations create consistent, long-term demand that justifies the cost of sponsorship.
Lead with cloud platform certifications in your application
AWS Certified Security Specialty, Google Professional Cloud Security Engineer, and Microsoft Azure Security Engineer certifications signal immediate value to sponsors. Employers use these to justify specialty occupation classification when filing your H-1B petition with USCIS.
Highlight zero-trust architecture experience specifically
Zero-trust frameworks are now a federal security standard and a boardroom priority across enterprise employers. Demonstrating hands-on zero-trust implementation experience narrows the candidate pool significantly, which strengthens your sponsorship case by reducing the employer's perceived hiring risk.
Request H-1B transfer, not a new cap-subject petition, if you're already sponsored
If you hold a valid H-1B, you can begin working for a new sponsoring employer as soon as they file a transfer petition. You do not need to wait for approval, and you are not subject to the annual lottery again.
Frame your degree field carefully in the petition
USCIS scrutinizes whether your degree field directly relates to cloud security. A computer science or information security degree maps cleanly. If your degree is in a broader field, a strong supplemental explanation letter from the employer significantly improves petition outcomes.
Engage employers early in their annual hiring cycle
H-1B cap-subject petitions must be filed in April for an October start date. Employers who commit to sponsorship late in Q1 risk missing the filing window. Reaching decision-makers by January gives both sides enough runway to complete the LCA and prepare the petition.
Cloud Security Architect jobs are hiring across the US. Find yours.
Find Cloud Security Architect JobsFrequently Asked Questions
Is Cloud Security Architect a qualifying specialty occupation for H-1B sponsorship?
Yes. Cloud Security Architect consistently qualifies as a specialty occupation under H-1B requirements because the role requires at minimum a bachelor's degree in computer science, information security, or a closely related field. USCIS has a long record of approving petitions for this title, particularly when the employer's job description specifies theoretical and practical application of security engineering principles rather than general IT administration.
Which visa types can Cloud Security Architects use besides H-1B?
Australian citizens can use the E-3 visa, which has no lottery and is significantly easier to obtain. Canadians and Mexicans may qualify under the TN visa category if the role is framed as a computer systems analyst or engineer. Individuals with extraordinary ability or a strong publication and conference record in security research may qualify for the O-1A. L-1A or L-1B transfers are available for candidates moving from an overseas office of a U.S. employer.
Do employers typically sponsor Cloud Security Architects for green cards?
Many do, particularly large technology companies, defense contractors, and financial institutions that rely on long-term security leadership. Most Cloud Security Architects pursue permanent residence through the EB-2 or EB-3 employment-based preference categories via PERM labor certification. Those with exceptional recognition in the field may qualify for EB-1B or pursue a National Interest Waiver under EB-2, which eliminates the need for PERM entirely.
How competitive is the H-1B lottery for this role, and are there cap-exempt options?
Cap-subject H-1B petitions enter the same lottery as all other applicants, with selection rates around 25% in recent years. However, some Cloud Security Architect positions at universities, nonprofit research organizations, or government-affiliated entities are cap-exempt, meaning no lottery applies. If you currently hold H-1B status with another employer, a transfer to a new sponsor skips the lottery entirely regardless of the new employer's cap status.
Where can I find Cloud Security Architect jobs that offer visa sponsorship?
Migrate Mate lists Cloud Security Architect roles from employers who have a documented history of sponsoring work visas, so you can filter specifically for sponsorship-open positions rather than applying broadly and hoping. This matters for this role because many job postings omit sponsorship status, and Migrate Mate surfaces employers whose USCIS and DOL filing history confirms they actively sponsor.
What is the prevailing wage requirement for sponsored Cloud Security Architect jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.
See which Cloud Security Architect employers are hiring and sponsoring visas right now.
Search Cloud Security Architect Jobs