NinjaOne

About the role

We’re hiring a Cloud Security Architect to join NinjaOne’s Information Security Architecture team. This is a high-impact technical leadership role focused on securing our AWS environments and helping scale our cloud security strategy through automation, standardization, and collaboration.

You’ll work closely with Platform Engineering, DevOps, Compliance and DFIR to define secure infrastructure design patterns, harden our environments, and improve visibility and detection across cloud services. If you’re passionate about building security into cloud-native systems and solving real-world challenges at scale—this role is for you.

Location - We are flexible on remote working from home, if you are located in the USA and reside in one of the following states - CA, CO, CT, FL, GA, *IL, KS, ME, MA, NJ, NC, NY, OR, TN, TX, VA, and WA. We have physical offices in Austin, TX and Tampa, FL, if you prefer a hybrid option.

What you’ll be doing

• Design and secure AWS-first cloud infrastructure, with optional expansion into Azure/GCP, using reference architectures, guardrails, and policy-as-code.
• Collaborate with DevOps to secure Terraform/CDK-based IaC and embed controls in CI/CD pipelines.
• Conduct cloud-focused threat modeling and drive architectural risk reviews for new infrastructure and services.
• Improve cloud visibility by partnering with DFIR to enhance Cribl-based log pipelines and Splunk detection coverage.
• Lead least-privilege IAM design, network segmentation, and encryption strategies across AWS accounts.
• Automate security posture checks and rollout proactive hardening initiatives.
• Support incident response with architectural input and drive post-incident improvements.
• Mentor team members and promote a security-first culture across engineering.
• Communicate security posture and controls clearly during customer audits and evaluations.
• Other duties as needed

About you

• 10+ years of experience in cybersecurity, with at least 5+ years focused on cloud security architecture in AWS-centric environments.
• Deep hands-on knowledge of AWS services including EC2, VPC, IAM, KMS, S3, Lambda, RDS, EKS, CloudTrail, GuardDuty, Secrets Manager, and related controls.
• Proficient in Infrastructure-as-Code and automation using Terraform, AWS CDK, CloudFormation, and Ansible.
• Strong experience embedding security into CI/CD pipelines and working closely with DevOps and engineering teams to shift security left.
• Skilled in cloud threat modeling, secure design reviews, and proactive identification of architectural risks.
• Familiarity with log management pipelines (Cribl), detection tooling (Splunk), and AWS-native security services.
• Capable of automating security posture checks and implementing policy-as-code or compliance-as-code frameworks.
• Proficient in Python or Go for developing internal tooling, automation, or integrations with cloud APIs.
• Excellent communicator with a track record of mentoring engineers and working cross-functionally with infrastructure, DFIR, and compliance teams.
• Holds relevant certifications such as AWS Security Specialty, CISSP, OSCP, or equivalent.

About Us

NinjaOne simplifies IT operations by automating the toughest parts—delivering visibility, security, and control across all endpoints. Trusted by over 30,000 customers, our platform boosts productivity, reduces security risk, and lowers costs for IT teams and MSPs. We're obsessed with customer success and back it up with free, unlimited onboarding, training, and support. NinjaOne is ranked #1 on G2 in endpoint management, patch management, RMM, and mobile device management.

What You’ll Love

A collaborative, kind, and curious team culture

Remote-friendly work with hybrid options available

Comprehensive benefits package: medical, dental, vision

401(k) plan to support your financial future

Unlimited PTO and strong focus on work-life balance

Clear paths for career growth and advancement

Additional Information

This position is NOT eligible for Visa sponsorship.

• Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago. We will consider all qualified candidates who reside outside of the city proper or are willing to self-relocate.

Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to location, market demands, experience, job-related knowledge, and skills. The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage and PTO. For roles based in California, Colorado, or Washington the base salary hiring range for this position is $150,000 to $210,000 per year.

For roles based in New York, the base salary hiring range for this position is $150,000 to $210,000 per year.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, veteran status, or any other status protected by applicable law. We are committed to providing an inclusive and diverse work environment.

#LI-KS2

#LI-Remote

#BI-Remote