Cloud Security Architect

We are seeking an experienced Cloud Security Architect to support the design, assurance, and governance of secure cloud solutions across enterprise-scale technology environments. As a Cloud Security Architect, you will act as the trusted security advisor for cloud-hosted solutions, ensuring security is embedded throughout design, build, deployment, and operational phases. You will be responsible for defining security standards, conducting architecture reviews, leading threat modelling activities, and providing security assurance across cloud and hybrid environments.

Key Responsibilities

• Design and assure secure cloud architectures across AWS, Azure, and/or GCP
• Define and maintain cloud security standards, policies, and principles
• Develop secure reference architectures and implementation patterns
• Support secure adoption of cloud-native services and platforms
• Conduct security design reviews of cloud, SaaS, and third-party solutions
• Assess security risks and identify appropriate mitigation strategies
• Ensure compliance with enterprise security standards and regulatory requirements
• Provide security oversight throughout project and delivery lifecycles
• Lead threat modelling exercises for cloud platforms and workloads
• Translate security requirements into practical technical controls
• Drive risk-based security decisions and remediation activities
• Support incident response and security monitoring initiatives
• Advise on IAM, network security, workload protection, and data security
• Support container, Kubernetes, and microservices security initiatives
• Work with DevOps and platform teams to implement secure engineering practices
• Contribute to DevSecOps and cloud security automation initiatives
• Strong experience as a Cloud Security Architect or Security Consultant
• Hands‑on expertise with AWS, Azure, and/or GCP
• Deep understanding of IAM, network security, and data protection
• Knowledge of security frameworks such as NIST, ISO 27001, and CIS
• Experience with DevSecOps, SIEM, and security monitoring tools
• Strong threat modelling and security assessment experience
• Ability to translate technical risk into business-focused recommendations
• Excellent stakeholder management and communication skills
• 7–10+ years of experience in technical security leadership roles
• Multi-cloud or hybrid cloud environments
• Kubernetes, container, and serverless security
• CSPM, CASB, and CNAPP platforms
• Python, PowerShell, or Bash scripting
• CISSP, CCSP, AWS Security, Azure Security, or equivalent certifications