Job Description

CLOUD SECURITY ARCHITECT TEAM LEAD

Grade: 8

Schedule: M-F

Location: 4 Days in the office – Atlanta, GA or Birmingham, AL

Southern Company, a major U.S. energy firm, is seeking an experienced Senior Cloud Security Architect to design secure cloud solutions and reduce enterprise risk as part of the Cybersecurity Architecture organization. The candidate will directly support the company’s efforts to mitigate real and potential cyber threats to its facilities, personnel, technology, operations, and brand — including critical electric and gas utility infrastructure and privately owned telecommunications networks. This role has significant individual impact and high visibility within corporate leadership and governance.

This role serves as both a Cloud Security Architect and the Cloud Security Operations Team Lead, with responsibility for helping define and execute the strategic direction for Enterprise Security Architecture in the areas of Cloud and Application Security, in partnership with the Cybersecurity Architecture Manager. The position is focused on designing, deploying, and operationalizing cloud security architectures, tools, and processes, and leading cloud security operations to ensure consistent, measurable risk reduction.

The role operates within a multi‑cloud environment, with primary emphasis on Azure, and additional responsibility across Google Cloud, Oracle Cloud, and others. The successful candidate will work across architecture, engineering, and operations to design secure solutions, deploy new security capabilities, and integrate security into cloud platforms and delivery processes at scale.

Qualified candidates must be able to operate in a fast‑paced environment; translate strategy into execution; design and implement secure cloud architectures; assist with cloud security operations; influence outcomes through strong partnerships; stay current with evolving cloud and security technologies; and maintain a strong focus on delivery and results.

This position is responsible for ensuring the confidentiality, integrity, and availability of the company’s information assets by:

• Establishing and implementing cloud security architecture, standards, and operating models.
• Designing, deploying, and operating cloud security applications, tools, and processes.
• Providing cloud security leadership, technical expertise, and consulting across the enterprise.

JOB RESPONSIBILITIES:

• Execute the enterprise Cloud Security Architecture and Operations roadmap in alignment with cybersecurity leadership direction.
• Lead the Cloud Security Operations team, providing technical direction, prioritization, mentorship, and oversight.
• Design, implement, and maintain secure cloud architecture patterns and services across Azure and other cloud environments.
• Establish and maintain cloud security operating models, workflows, and procedures to support reliable, repeatable execution.
• Oversee deployment and operational maturity of cloud security capabilities, including identity security, CSPM, logging, monitoring, and automation.
• Coordinate cross‑functional delivery efforts across Cybersecurity, Cloud Engineering, Identity, Network, Application, and Infrastructure teams.
• Ensure cloud security initiatives are operationally ready prior to scale, including validated architectures, documented processes, runbooks, and escalation paths.
• Partner with SOC and Incident Response teams to support cloud security alerting, investigation workflows, and response readiness.
• Drive ongoing maturity of cloud security controls through tuning, coverage expansion, continuous monitoring, and remediation of risk.
• Identify, assess, and coordinate remediation of cloud security risks such as misconfigurations, excessive permissions, insecure deployments, and architecture gaps.
• Develop and maintain metrics, dashboards, and reporting to measure cloud security posture, control effectiveness, and risk reduction.
• Support governance, exception handling, and change management related to cloud security standards and enforcement.
• Serve as a trusted advisor to technology and business stakeholders by translating business needs into secure, practical cloud solutions.
• Promote a culture of accountability, collaboration, and continuous improvement across cloud and security teams.

REQUIREMENTS:

Minimum

• Expert‑level experience securing enterprise cloud environments, with strong hands‑on expertise in Azure.
• Demonstrated experience designing and operating cloud security architectures at scale.
• Experience leading or coordinating a technical security operations or engineering team.
• Strong understanding of cloud identity, networking, data protection, monitoring, and platform security principles.
• Proven ability to manage complex workstreams, dependencies, and priorities across multiple teams.
• Strong communication skills, including the ability to produce executive‑ready documentation, metrics, and status reporting.
• Ability to operate effectively in a matrixed organization without direct authority.
• 5+ years of experience in cybersecurity, cloud security, or related technical roles.
• Must pass NERC CIP & Insider Threat Protection background checks.

Preferred Qualifications

• Cloud security certifications (Azure, AWS, or CCSP).
• Industry certifications such as CISSP, CISA, GIAC, CRISC, or OSCP.
• Experience with cloud security tooling (e.g., CSPM, CIEM, SIEM, identity platforms).
• Experience with infrastructure‑as‑code, APIs, or automation frameworks.
• Familiarity with NIST, CIS, OWASP, and Zero Trust security principles.
• Experience operating in regulated or critical infrastructure environments.
• Experience developing KPIs and dashboards to demonstrate security outcomes and risk reduction.
• Up-to-date knowledge of current hacking techniques, vulnerability disclosures, and data breach incidents.
• Experience with cybersecurity analysis and analytic tradecraft.

About Southern Company

Southern Company (NYSE: SO) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers' and communities' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com

Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf Additional and specific details about total compensation and benefits will also be provided during the hiring process.

Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.