At Broadridge, we’ve built a culture where the highest goal is to empower others to accomplish more. If you’re passionate about developing your career, while helping others along the way, come join the Broadridge team.
Broadridge is hiring! We’re looking for a visionary Cloud Security Architect to drive the security of our AWS and containerized environments. This role combines strategic design with hands‑on engineering—building and automating scalable controls that truly work in practice. You’ll partner with cloud, DevOps, and security teams to embed protections across identity, network, application, and data layers. From deploying and optimizing WAFs, IAM, CSPM, DSPM, and CNAP to leveraging Infrastructure as Code and modern DevSecOps automation, you’ll shape the future of cloud security at scale.

Responsibilities:

• Architect, configure, and maintain security solutions in AWS, including:
• AWS WAF and related web application protection technologies
• IAM roles, policies, and federation
• CSPM and DSPM platforms for posture management and data security
• CNAP tooling for container and workload protection
• Provision and manage security infrastructure using Terraform (modular, reusable IaC), using Git for version control.
• Develop automation in Python or Golang to streamline deployment, monitoring, and remediation processes.
• Integrate security controls into CI/CD workflows for automated guardrails and compliance enforcement.
• Continuously tune security configurations based on real-world traffic analysis, vulnerability scanning, and compliance requirements.
• Collaborate with cross-functional teams to ensure security measures align with compliance frameworks (NIST, CIS, PCI DSS, HIPAA) while maintaining operational efficiency.
• Document security configurations, operational runbooks, and troubleshooting procedures for consistent execution and knowledge sharing.
• Apply deep technical knowledge of the HTTP request lifecycle (methods, headers, status codes), TLS encryption, and certificate management to secure workloads and services

Qualifications:

• 5+ years in security engineering, infrastructure security, or cloud security, with 3+ years in AWS-focused roles.
• Hands-on expertise in:
• AWS WAF configuration and rule tuning.
• IAM (least privilege, service roles, federation).
• CSPM/DSPM tools for posture and data protection.
• CNAP tools for workload and container protection.
• Cloud networking security (Transit Gateway, VPC Endpoints, PrivateLink).
• Encryption protocols, HTTP/TLS, and API/web security.
• Strong background in Terraform and Git workflows for secure, version-controlled deployments.
• Scripting proficiency in Python or Golang for automation and integration.
• Deep knowledge of security standards and frameworks (NIST, CIS, PCI DSS, HIPAA).
• Demonstrated experience in cloud-native architectures, microservices, and operational best practices in cloud and container orchestration.
• Integration of enterprise-scale security solutions across identity, network, and workloads.
• Proficiency in full stack cloud automation using tools like Git, Terraform, Chef, and Jenkins.
• Exceptional communication skills — able to distill complex technical issues into actionable guidance for varied audiences.
• Proven ability to work independently, manage multiple priorities, and deliver results in fast-paced, high-demand environments.
• Commitment to continuous learning, staying current with emerging technologies, and adapting to evolving requirements
• Bachelor’s degree in computer science, Information Technology, or a related field (advanced degree or certifications such as CISSP, CCSP, AWS Certified Security – Specialty preferred).
• Flexibility to be remote or hybrid

Compensation Range: The salary range for this position is between $145,000 - $165,000 USD. Broadridge considers various factors when evaluating a candidate’s final salary including, but not limited to, relevant experience, skills, and education.
Bonus Eligibility: Bonus Eligible
Benefits Information: Please visit
www.broadridgebenefits.com
for more information on our comprehensive benefit offerings

LI-PP1

We are dedicated to fostering a collaborative, engaging, and inclusive environment and are committed to providing a workplace that empowers associates to be authentic and bring their best to work. We believe that associates do their best when they feel safe, understood, and valued, and we work diligently and collaboratively to ensure Broadridge is a company—and ultimately a community—that recognizes and celebrates everyone’s unique perspective.
US applicants: Click
here
to view the EEOC “Know Your Rights” poster.
Disability Assistance
We recognize that ensuring our long-term success means creating an environment where everyone is welcome, where everyone’s strengths are valued, and where everyone can perform at their best. Broadridge provides equal employment opportunities to all associates and applicants for employment without regard to race, color, religion, sex (including sexual orientation, gender identity or expression, and pregnancy), marital status, national origin, ethnic origin, age, disability, genetic information, military or veteran status, and other protected characteristics protected by applicable federal, state, or local laws.
If you need assistance or would like to request reasonable accommodations during the application and/or hiring process, please contact us at 888-237-7769 or by sending an email to
BRcareers@broadridge.com

• Architect, configure, and maintain security solutions in AWS, including:
• AWS WAF and related web application protection technologies
• IAM roles, policies, and federation
• CSPM and DSPM platforms for posture management and data security
• CNAP tooling for container and workload protection
• Provision and manage security infrastructure using Terraform (modular, reusable IaC), using Git for version control.
• Develop automation in Python or Golang to streamline deployment, monitoring, and remediation processes.
• Integrate security controls into CI/CD workflows for automated guardrails and compliance enforcement.
• Continuously tune security configurations based on real-world traffic analysis, vulnerability scanning, and compliance requirements.
• Collaborate with cross-functional teams to ensure security measures align with compliance frameworks (NIST, CIS, PCI DSS, HIPAA) while maintaining operational efficiency.
• Document security configurations, operational runbooks, and troubleshooting procedures for consistent execution and knowledge sharing.
• Apply deep technical knowledge of the HTTP request lifecycle (methods, headers, status codes), TLS encryption, and certificate management to secure workloads and service