AD, Cloud Security Architect

Job description

About the Role: Grade Level (for internal use): 12The Team Join our innovative and collaborative team at S&P Global's IT - Enterprise Technology department. We pride ourselves on fostering a culture that values excellence, teamwork, and continuous learning. Our team is dedicated to pushing the boundaries of AI technology and delivering impactful solutions that drive business success. Job Description We are seeking an experienced Lead II, Software Engineer to join our team as an individual contributor with deep technical expertise. This role will lead software-related projects, including GenAI initiatives, develop solutions to complex business challenges, and provide technical direction while working closely with cross-functional teams to deliver high-impact engineering solutions. This is a security-remediation-heavy role: the successful candidate will spend significant time driving down vulnerability, dependency, and secret-exposure findings across our systems and holding our codebase to Concord security standards. Security Focus Security remediation is a primary, day-to-day part of this role. The Lead II will be expected to spend significant time driving down findings across Wiz, SVA/DVA scans, Dependabot, GitHub Advanced Security (GHAS), and CodeQL, and remediating exposed secrets, all in accordance with Concord security standards. Candidates should be comfortable treating security work with the same rigor and priority as feature development. Responsibilities and Impact • Lead software-related projects, including GenAI initiatives, from design through delivery, ensuring alignment with customer needs and capabilities. • Own security remediation as a core, ongoing responsibility: continuously triage, prioritize, and drive vulnerabilities to closure across Wiz, static application security testing (SVA), dynamic application security testing (DVA), Dependabot, GitHub Advanced Security (GHAS), and CodeQL, ensuring findings are remediated within SLA and root causes are addressed, not just symptoms. • Lead secret detection and remediation efforts, including identifying exposed credentials and secrets, rotating and revoking compromised material, and hardening pipelines to prevent recurrence, in strict alignment with Concord security standards. • Develop solutions for complex internal and/or external business challenges; recommend improvements to products, processes, or services. • Develop and monitor complex project plans and budgets. • Provide guidance on routine to highly complex technical problems with broad impact across the business area. • Exercise sound judgment within defined procedures and policies to determine appropriate courses of action. • Analyze situations or data requiring review of multiple relevant factors to inform technical decisions. • Lead the creation and maintenance of hardware and/or software systems, applying mastery of one or more programming languages. • Act as a technical lead when collaborating with other teams; frequently interact with subordinate supervisors and functional peer groups. • Communicate complex technical concepts clearly, anticipate objections, and influence senior leaders to consider alternative approaches. • Proactively invest time in building and living team culture, and support the cultural awareness and growth of others. • Document processes, code changes, and project updates to facilitate knowledge sharing and transparency. • Track and report on security remediation metrics (open findings, aging, SLA compliance) to engineering and security leadership, and champion secure-by-design practices so new code minimizes future Wiz/SVA/DVA/GHAS/CodeQL findings. What We're Looking For Basic Required Qualifications: • Bachelor's, Master's, or similar advanced degree in Computer Science, Engineering, or a related field, or equivalent work experience. • 10 years of related software engineering experience. • Mastery of one or more high-level programming languages, along with relevant technologies, development tools, and effective design techniques. • Working knowledge of the GenAI or agentic technology stack (e.g., LLMs, prompt engineering, agent frameworks, and related tooling). • Knowledge of containerization technologies like Docker. • Understanding of CI/CD pipelines and DevOps practices. • Substantial, hands-on experience with security remediation as a core part of the role — not a one-off task — including vulnerability scanning and management (Wiz, static/dynamic vulnerability assessments — SVA/DVA), dependency and code scanning (Dependabot, GitHub Advanced Security/GHAS, CodeQL), and secret detection and remediation; strong working knowledge of Concord security standards. • Proven ability to consistently drive high volumes of security findings to closure on schedule, prioritize remediation work alongside feature delivery, and hold self and team accountable to security SLAs. • Demonstrated experience leading software projects and guiding teams through complex technical problems. • Strong ability to manage ambiguity, facilitate impactful check-in discussions, and navigate difficult conversations effectively. • Excellent communication skills, with the ability to influence stakeholders and senior leaders. Additional Preferred Qualifications: • Prior Team Lead experience. • Hands-on experience with GenAI projects, including agent-based architectures or frameworks (e.g., Langchain, LlamaIndex). • Experience mentoring and developing the technical and professional growth of team members. • Familiarity with modern software development practices a