Cloud Security Architect
Ekco
- Ireland
- Lead/Staff
- Posted
Skills
Required
- AWS
- architectures
- Terraform
- Microsoft Azure
- developing reusable architecture patterns / delivery accelerators / productised cloud security services
- cloud governance
- landing zones
- multi-subscription operating models
- Infrastructure as Code
- DevSecOps delivery
- CloudFormation
- Bicep
- GitHub Actions
- CodePipeline / Azure DevOps
Preferred
- cloud
- cloud security guardrails
- Kubernetes / container security / software supply-chain controls / AI security / data protection / regulated-industry environments
- AWS Certified
- CCSP / CISM
Join our team as a Cloud Security Architect, where you will lead secure cloud transformation for enterprise and regulated clients.
Responsibilities
- You will assess complex environments, define security strategies and architectures, and guide the delivery of secure solutions across cloud, hybrid, and on-premises platforms.
- As a trusted advisor, you will translate risk, regulatory obligations, and business objectives into practical security designs, assessments, and improvement roadmaps.
- You will also lead client engagements, provide technical leadership, and help productize reusable architecture patterns and cloud security services.
- Lead secure cloud transformation for enterprise and regulated clients, focusing on AWS and Microsoft Azure.
- Assess complex environments, define security strategies and architectures, and guide the delivery of secure solutions across cloud, hybrid, and on-premises platforms.
- Translate risk, regulatory obligations, and business objectives into practical security designs, assessments, and improvement roadmaps.
- Strong knowledge of identity, network, platform, application, data, security operations and resilience controls, including Zero Trust and shared-responsibility principles
- Ability to conduct security assessments and threat modelling, evaluate technical risk, and produce architecture diagrams, security designs, risk registers, remediation roadmaps and executive reports
Requirements
- Experience developing reusable architecture patterns, delivery accelerators, or productised cloud security services. A relevant degree or equivalent professional experience is also required
- Hands-on experience with cloud governance, landing zones, multi-account or multi-subscription operating models, Infrastructure as Code, and DevSecOps delivery using tools such as Terraform, AWS CloudFormation, Bicep, GitHub Actions, AWS CodePipeline, or Azure DevOps
- Strong consulting, team leadership and stakeholder-management skills, including mentoring technical teams, workshop facilitation, pre-sales support and clear communication of complex risk
- Experience applying regulatory and security requirements such as GDPR, NIS2, DORA, ISO 27001, NIST, CIS, CSA and OWASP to cloud environments
- Substantial experience designing and assuring secure enterprise cloud architectures, with deep practical experience in AWS and strong hands-on expertise across Microsoft Azure and hybrid environments
- Professional membership or accreditation with ISC2, ISACA, CiiSec or BCS
Preferred
- Experience implementing cloud security guardrails at scale across complex enterprise or regulated environments
- Experience with Kubernetes, container security, software supply-chain controls, AI security, data protection or regulated-industry environments
- Relevant certifications such as AWS Certified Security – Specialty or AWS Certified Solutions Architect – Professional, together with Microsoft Certified: Cybersecurity Architect Expert or Azure Security Engineer Associate. HashiCorp Certified: Terraform Associate, CISSP, CCSP or CISM would also be valuable; equivalent practical experience is equally valued
jobapplier