Solutions architect iv

Warner Bros. Discovery (WBD) is a global studio, broadcast, and streaming company operating at massive scale across Azure, GCP, and AWS. The Cloud Security Architect is a senior practitioner on WBD’s cloud security team, reporting to director level leadership, responsible for shaping policy, leading architectural reviews, driving AI security governance, and providing direct technical guidance to product and engineering teams across all public cloud environments.

• Act as a Cloud Security Subject Matter Expert (SME) for WBD’s Infosec department.
• Partner with product teams to design secure network and serverless architectures.
• Provide strong IAM Policy guidance to enable product teams to implement least privilege access.
• Review cloud architecture and AI/ML workflows to advise development teams on strong security design principles and identification of issues prior to deployment of systems or features.
• Engage with Azure, GCP, and AWS account teams and technical advisors to influence roadmaps and resolve security escalations.

Project and Process Enhancements

• Reduce cloud security risk for WBD, develop solutions, and lead implementations.
• Define and enforce security controls for AI/ML pipelines, including model access governance, data handling, and prompt injection risk.
• Create design artifacts to enable members of the Cloud Security team to implement solutions (built in-house or purchased from vendor).
• Collaborate with senior management and department leaders to assess near- and long-term cloud security needs.
• Mentor junior members of the team.

Operational

• Create and maintain documentation as it relates to cloud security implementations, processes, standards, and recommendations.
• Participate in a tier 4 SME on-call rotation (primary duty every ~7 weeks); engaged only after lower tiers are exhausted, averaging roughly one page per quarter.
• Stay current with the latest cloud and AI threat mitigation tools and techniques.

Qualifications & Experiences:

• 7+ years of cloud security architecture roles.
• Bachelor’s degree in computer science, Information Security, or equivalent practical experience.
• Strong understanding of cloud-based infrastructure components with specific understanding of the security risks presented in a decentralized and hybrid environment.
• Broad understanding of information security and compliance risk, and how those apply to Public Cloud.
• Core understanding of IP Networking.
• Demonstrated ability to build and own security automation end-to-end, including tool integration, pipeline implementation, and operational handoff.
• Proficient in at least one scripting language (python, Nodejs, Golang, bash, etc).
• Hands-on experience with the following:
• Cloud native security related tools (Azure Defender for Cloud, GCP Security Command Center, AWS GuardDuty, etc)
• Command Line experience (Bash, Powershell, AWS-CLI)
• Security administration in Azure/GCP/AWS
• Perimeter Security (WAF, CDN, public compute, etc)
• Cloud Network engineering (CIDR, public/private routing, VPN)
• Zero trust architecture and secrets management (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
• SIEM/logging platforms (e.g., Splunk, Chronicle)
• Infrastructure as code tools (Terraform, CloudFormation, Ansible)
• Docker and Kubernetes
• Developing & Securing Serverless applications
• GitHub Security
• Familiarity with security frameworks and benchmarks (NIST CSF, CIS Benchmarks, SOC 2).
• Excellent verbal and written communication skills with a strong attention to detail.
• Ability to remain productive while rapidly switching context.
• Demonstrated drive to stay current with evolving threat landscapes.

Not Required but preferred experience:

• Experience securing AI/ML workloads, including LLM API governance, training data access controls, and RAG pipeline security.
• Azure Certifications – Azure Fundamentals, Solutions Architect
• GCP Certifications – Associate Cloud Engineer, Professional Security Engineer
• AWS Certifications – AWS Solutions Architect, AWS Security Specialty
• Security Engineer Certifications – CISSP, CompTIA Security+
• Previous Experience with Wiz, Splunk, or Brinqa integrations

Please note that this is a contract role providing services to Warner Bros. Discovery through external staffing partners of Allegis Global Solutions. If you are selected for this role, you will be employed by AGS and will not be an employee of Warner Bros. Discovery. This role is eligible for the following benefits: Medical, dental & vision Hospital plans 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available Life Insurance (Company paid Basic Life and AD&D as well as voluntary Life & AD&D for the employee and dependents) Company paid short and long-term disability Health & Dependent Care Spending Accounts (HSA & DCFSA) Employee Assistance Program Time Off/Leave(PTO, Allegis Group Paid Family Leave, Parental Leave Benefits are subject to change and may be subject to specific elections, plan, or program terms. AGS is an Equal Opportunity Employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. If you would like to request a reasonable accommodation, such as the modification or adjustment of the job application process or interviewing process due to a disability, please email accommodation@allegisglobalsolutions.com for other accommodation options. In accordance with the Immigration Reform and Control Act of 1986, employment is contingent upon verification of identity and authorization to work in the United States. All persons hired will be required to complete Form I-9 and provide acceptable documentation as required by law. Please note that we may use artificial intelligence (AI) tools to screen, assess, or select applicants for this position. These tools may analyze application materials and assist our team in identifying candidates whose qualifications best match the requirements of the role. If you have questions about our use of AI in the hiring process, or would like more information, please contact us. *We reserve the right to pay above or below the posted wage based on factors unrelated to protected classifications. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors. San Francisco Candidates only: Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. City of Los Angeles Candidates only: We will consider for employment all qualified applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring.