We Put the World on Vacation
Travel + Leisure Co. is the world’s leading vacation ownership and travel membership company, with a dynamic and growing portfolio of resort, travel club, and lifestyle travel brands. Our dedicated associates help the company achieve its mission to put the world on vacation. Innovation and growth keep our work interesting and fun. Every day is a chance to learn something new and turn vacation inspiration into exceptional experiences for millions of travelers worldwide.
The Cloud Security Architect will provide strategic leadership on cloud security through the design and delivery of scalable, cloud-native security architectures and the development of standards and reference architectures that accelerate secure cloud adoption. The candidate will translate business objectives and risk management strategies into cloud security capabilities, ensuring the organization can move to and operate in the cloud with confidence.
How You'll Shine:
Cloud Security Architecture:
- Design and maintain a cloud security architecture framework that enables secure adoption of public, private, and hybrid cloud environments aligned to business, technology, and threat drivers.
- Develop and maintain cloud security reference architectures, patterns, and guardrails leveraged across the enterprise — covering IaaS, PaaS, SaaS, and serverless environments.
- Define and govern cloud security standards, policies, and procedures in alignment with audit, compliance, and platform engineering teams.
- Partner with Application Architects, Platform Engineers, and DevOps teams to embed security by design into cloud-native architectures and CI/CD pipelines.
- Build and maintain cloud security strategic roadmaps, including adoption of CSPM, CNAPP, Zero Trust, and cloud identity capabilities.
Cloud Security Consulting:
- Evaluate cloud platform and infrastructure projects for alignment with security, compliance, and cloud-native best practices.
- Lead cloud architecture and design reviews, providing actionable security guidance across AWS, Azure, and/or GCP environments.
- Drive cloud security technology evaluations and proof-of-concept efforts, with a focus on capabilities that scale across a multi-cloud environment.
Vendor Management and M&As:
- Partner with vendor management to assess the cloud security posture of existing and prospective vendors and SaaS providers.
- Lead cloud security assessments for mergers and acquisitions, with emphasis on cloud environment hygiene, identity posture, and data risk.
Travel Requirements:
- Travel requirements will be no more than 3–4 days quarterly, primarily between the Indianapolis and Orlando offices. Estimated Travel: 5%
What You'll Bring:
- Bachelor's degree in information technology, Computer Science, or equivalent experience
- CCSP, CISSP, AWS Security Specialty, or equivalent cloud security certification
- Demonstrated experience designing and securing cloud environments at enterprise scale across one or more major cloud providers (AWS, Azure, GCP)
- Strong understanding of cloud-native security services — identity and access management, data protection, network security, workload protection, and logging/monitoring
- Experience with cloud security posture management (CSPM), cloud workload protection (CWPP), and CNAPP platforms
- Familiarity with infrastructure-as-code security (Terraform, CloudFormation) and DevSecOps pipeline integration
- Deep knowledge of cloud identity architectures including IAM, federated identity, Privileged Access Management, and Zero Trust principles
- Experience with container and Kubernetes security in cloud-native deployments
- Working knowledge of compliance frameworks applicable to cloud environments — PCI-DSS, HIPAA, NIST CSF, CIS Cloud Benchmarks
- Knowledge of data privacy and protection regulations and how they apply to cloud data residency and handling
- Excellent written, verbal, and presentation skills — able to communicate cloud risk clearly to technical and executive audiences
- Strong ability to manage and prioritize multiple concurrent initiatives in a fast-paced environment
- Knowledge of the vacation or hospitality industry a plus
- 5+ years of information security experience
Experience equivalent to the education requirement may be accepted in lieu of the education requirement.
How You'll Be Rewarded:
We offer a diverse range of comprehensive health and welfare benefits to associates who work 30 or more hours per week to meet your needs and support you throughout your career with us. Travel + Leisure Co. benefits include:
Note: Temporary and/or seasonal associates are ineligible for Paid Time Off.
- Medical
- Dental
- Vision
- Flexible spending accounts
- Life and accident coverage
- Disability
- Depending on position, paid time off, parental leave and holidays (speak to your recruiter for additional information)
- Wish day paid time to volunteer at an approved organization of your choice
- 401k with employer match (subject to eligibility requirements, including tenure - speak to your recruiter for additional information)
- Legal and identify theft plan
- Voluntary income protection benefits
- Wellness program (subject to provider availability)
- Employee Assistance Program
Where Memories Start with You
Hospitality is at the heart of all we do at Travel + Leisure Co. Here, you’ll find an inclusive environment where we deliver excellence and take time to have fun, celebrate together, and support one another. We're always looking ahead to what’s next and how we can strengthen our business, its neighboring communities, and the customer experience. Join our global team and build a career where memories start with you.
We are an equal opportunity employer, and all applications will be considered for employment without attention to their membership in any protected class. If you require any reasonable accommodation to complete your application or any part of the recruiting process, please email your request to MyCareer@travelandleisure.com, including the title and location of the position for which you are applying.
