Sr. Cloud Security Architect

Neptune Technology Group Inc.

is a technology company serving water utilities across North America.  Since 1892, we have continually focused on the evolving needs of water utilities – revenue optimization, operational efficiencies, and improved customer service.  With our portfolio of smart water meters, data collection systems and software, we make data actionable for our customers – so they can remain focused on the business of water.

For additional information, please visit the company website at www.neptunetg.com.

Sr.

Cloud Security Architect

Position Summary

As a Sr.

Cloud Security Architect, you will play a critical role in Neptune’s cybersecurity program by designing, implementing, and governing secure cloud architectures across a hybrid environment (on‑prem, cloud, and SaaS).

You will work closely with Cloud, Platform, DevOps, and Security Operations teams to embed security‑by‑design principles, enforce guardrails, and strengthen prevention, detection, and compliance capabilities across cloud workloads.

In addition to architecture and engineering responsibilities, you will provide senior technical support to Incident Response activities involving cloud environments, assisting with investigation, containment, remediation, and post‑incident improvements when needed.

Responsibilities:

Cloud Security Architecture


* Design and implement secure cloud architectures, landing zones, and guardrails across AWS and Azure environments


* Develop and maintain cloud security standards, reference architectures, and reusable patterns


* Enforce security‑by‑design and least‑privilege principles across cloud networking, identity, and workloads


* Support securebydefault provisioning and segmentation strategies



* Design and implement security controls for AI/ML workloads and services (e.g., AWS Bedrock, Azure OpenAI, SageMaker), including data protection, access controls, and API security

Cloud Security Engineering & Automation


* Implement and maintain native and third‑party cloud security controls (IAM, CSPM, logging, posture management)


* Translate regulatory and internal security requirements into enforceable technical controls


* Integrate security controls into infrastructure‑as‑code and CI/CD pipelines


* Develop automation to detect misconfigurations, reduce manual effort, and improve control consistency



* Leverage AI-assisted tools to accelerate security engineering, threat modeling, and compliance automation, applying sound judgment on their limitations and avoiding over-reliance on automated outputs

Security Posture, Detection & Monitoring


* Monitor and assess cloud security posture using telemetry, posture management, and logging platforms


* Identify misconfigurations, control gaps, and emerging risks across cloud environments


* Partner with Security Operations to improve visibility, prioritization, and response for cloudrelated risks



* Evalu...