Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 10 days ago

Application Security Architect – Cloud & DevSecOps

CliftonLarsonAllen364 open roles

Where
Milwaukee WI
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowApplication Security Architect – Cloud & DevSecOpsCliftonLarsonAllen · Milwaukee WI

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CliftonLarsonAllen's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. CliftonLarsonAllen postings stay open a median of 30 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 10 days ago

CliftonLarsonAllen median: 30 days open

The posting

CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services.

We are seeking an Application Security Architect to join our growing technology team.

How You’ll Create Opportunities

The Application Security Architect will bridge application security architecture, engineering, DevOps, and cloud security. In this role, you will lead and support secure design reviews for proprietary and third-party solutions, assess technical and data flows, and identify the security controls needed to protect

CLA’s technology environment.

You will also provide technical governance and automation support for security controls across CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, cloud environments, and the software supply chain. A key focus of this position will be establishing a Cloud Security Posture Management practice that connects cloud infrastructure security with automated development workflows.

In this role, you will:

  • Lead and participate in secure design reviews for proprietary, commercial, cloud, and hybrid solutions.
  • Document identified risks, required mitigations, risk owners, exceptions, and residual-risk decisions.
  • Review system interaction diagrams and detailed logical, functional, physical, and data-flow diagrams.
  • Identify trust boundaries, security boundaries, integration points, administrative interfaces, data stores, and external dependencies.
  • Develop reusable security standards, assessment patterns, review templates, control baselines, and architectural guidance.
  • Establish and build a Cloud Security Posture Management practice by coordinating the appropriate people, processes, technology, governance, and service expectations.
  • Assess cloud permissions, secrets management, deployment architecture, infrastructure as code, container images, orchestration configurations, and cloud-native deployment patterns.
  • Identify opportunities to prevent configuration issues and policy violations before deployment through policy-as-code, automated validation, and reusable engineering guardrails.
  • Provide technical security leadership across Development, Cloud, Platform, Product, Data, Information Technology, Enterprise Architecture, and Risk teams.
  • Connect code, pipeline, identity, integration, data, and cloud architecture risks to practical security controls and business outcomes.
  • Distinguish mandatory security requirements from recommendations and risk-based enhancements.
  • Escalate unresolved material risks through established risk-acceptance processes.
  • Communicate technical risks, required controls, exceptions, ownership, and residual risk to technical and non-technical stakeholders.
  • Build strong partnerships, improve developer engagement with Application Security, and influence teams without direct authority.

What You’ll Need

  • Experience leading or supporting secure design reviews for application, cloud, commercial, and hybrid solutions.
  • Experience reviewing technical architecture, system interaction, and data-flow diagrams.
  • Experience with application security architecture, cloud security, DevOps security, and security engineering.
  • Knowledge of CI/CD pipelines, GitHub Actions and workflows, infrastructure as code, containers, and software supply-chain security.
  • Experience assessing cloud permissions, secrets management, deployment architecture, container images, orchestration configurations, and cloud-native deployment patterns.
  • Experience connecting technical security risks to practical controls and business outcomes.
  • Ability to communicate technical risks and security requirements to both technical and non-technical stakeholders.
  • Ability to build relationships and influence cross-functional teams without direct authority.

Preferred Qualifications

  • Professional certification such as CISSP, CCSP, or a comparable security, cloud, DevOps, or architecture credential.
  • Experience with Azure cloud services, cloud-native security patterns, and enterprise cloud identity platforms.
  • Experience with Black Duck Polaris or a comparable software composition analysis and application security platform.
  • Experience with Cloud Security Posture Management, container security, policy-as-code, artifact integrity, secrets management, and automated compliance controls.
  • Experience conducting threat modeling, architecture risk analysis, secure design reviews, vulnerability management, and risk-acceptance activities.
  • Experience working with NIST security and risk-management frameworks.
  • Familiarity with API security, integration platforms, citizen-development governance, and secure container orchestration patterns.

Job Requirements

  • 7 years of general IT experience required. 4 of which are with security of IT systems, and 2 with security design/stratgy.
  • Bachelor's degree is required. Combination of relevant experience, education, and training may be accepted in lieu of degree.

#LI-JH1

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

Click here to learn about your hiring rights.

Wellness at CLA

To support our CLA family members, we focus on their physical, financial, social, and emotional well-being and offer comprehensive benefit options that include health, dental, vision, 401k and much more.

To view a complete list of benefits, click here.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CliftonLarsonAllen's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on CliftonLarsonAllen's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    CliftonLarsonAllen's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.