jobapplier

Cloud Security Architect

Ekco

Skills

Required

  • AWS
  • architectures
  • Terraform
  • Microsoft Azure
  • developing reusable architecture patterns / delivery accelerators / productised cloud security services
  • cloud governance
  • landing zones
  • multi-subscription operating models
  • Infrastructure as Code
  • DevSecOps delivery
  • CloudFormation
  • Bicep
  • GitHub Actions
  • CodePipeline / Azure DevOps

Preferred

  • cloud
  • cloud security guardrails
  • Kubernetes / container security / software supply-chain controls / AI security / data protection / regulated-industry environments
  • AWS Certified
  • CCSP / CISM

Join our team as a Cloud Security Architect, where you will lead secure cloud transformation for enterprise and regulated clients.

Responsibilities

  • You will assess complex environments, define security strategies and architectures, and guide the delivery of secure solutions across cloud, hybrid, and on-premises platforms.
  • As a trusted advisor, you will translate risk, regulatory obligations, and business objectives into practical security designs, assessments, and improvement roadmaps.
  • You will also lead client engagements, provide technical leadership, and help productize reusable architecture patterns and cloud security services.
  • Lead secure cloud transformation for enterprise and regulated clients, focusing on AWS and Microsoft Azure.
  • Assess complex environments, define security strategies and architectures, and guide the delivery of secure solutions across cloud, hybrid, and on-premises platforms.
  • Translate risk, regulatory obligations, and business objectives into practical security designs, assessments, and improvement roadmaps.
  • Strong knowledge of identity, network, platform, application, data, security operations and resilience controls, including Zero Trust and shared-responsibility principles
  • Ability to conduct security assessments and threat modelling, evaluate technical risk, and produce architecture diagrams, security designs, risk registers, remediation roadmaps and executive reports

Requirements

  • Experience developing reusable architecture patterns, delivery accelerators, or productised cloud security services. A relevant degree or equivalent professional experience is also required
  • Hands-on experience with cloud governance, landing zones, multi-account or multi-subscription operating models, Infrastructure as Code, and DevSecOps delivery using tools such as Terraform, AWS CloudFormation, Bicep, GitHub Actions, AWS CodePipeline, or Azure DevOps
  • Strong consulting, team leadership and stakeholder-management skills, including mentoring technical teams, workshop facilitation, pre-sales support and clear communication of complex risk
  • Experience applying regulatory and security requirements such as GDPR, NIS2, DORA, ISO 27001, NIST, CIS, CSA and OWASP to cloud environments
  • Substantial experience designing and assuring secure enterprise cloud architectures, with deep practical experience in AWS and strong hands-on expertise across Microsoft Azure and hybrid environments
  • Professional membership or accreditation with ISC2, ISACA, CiiSec or BCS

Preferred

  • Experience implementing cloud security guardrails at scale across complex enterprise or regulated environments
  • Experience with Kubernetes, container security, software supply-chain controls, AI security, data protection or regulated-industry environments
  • Relevant certifications such as AWS Certified Security – Specialty or AWS Certified Solutions Architect – Professional, together with Microsoft Certified: Cybersecurity Architect Expert or Azure Security Engineer Associate. HashiCorp Certified: Terraform Associate, CISSP, CCSP or CISM would also be valuable; equivalent practical experience is equally valued