Cloud Security Architect

In this Cloud Security Architect role, you will shape secure multi-cloud architectures and establish guardrails to accelerate delivery. You’ll drive threat modelling, risk-based decisions, and secure-by-design governance across Azure, GCP, and hybrid environments. You’ll partner with engineering and product teams to embed security early and address security gaps in architecture proposals. Join a fast-moving transformation focused on secure, scalable cloud solutions for millions of customers.

• A generous pension contribution of up to 15%
• Annual performance-related bonus
• Share schemes including free shares
• Lifestyle-adaptive benefits (discounts)
• 30 days’ holiday + bank holidays
• Wellbeing initiatives and parental leave policies

• Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments
• Conduct threat modelling and security assessments for new cloud services and define preventative/detective controls
• Partner with engineering and product teams to embed security guardrails at design time ensuring compliance and resilience
• Review external architecture proposals to identify security gaps
• Document and uphold secure-by-design principles and architecture governance
• Collaborate with senior partners to articulate security risks and mitigations
• Anticipate customer needs and address them proactively

• Governance, risk & compliance: risk-based decisions and adherence to standards
• Threat modelling and risk management for complex cloud systems
• Broad cloud security expertise across Azure, GCP and related domains; familiarity with AWS desirable
• AI/ML security knowledge and applying controls for AI deployments in cloud
• Application security including CI/CD security and secure software supply chain
• Data security (keys, certificates, secrets management)
• Identity and access management at scale
• Infrastructure security (Kubernetes, API security, IaC security)
• Network security (Zero Trust, firewalls, segmentation, DDoS protection)
• Security logging and monitoring (SIEM integration)
• CISSP, CCSP or equivalent certifications; Azure/GCP security engineer or architect certifications

• cross-functional collaboration
• proactive problem-solving
• clear risk communication
• Azure
• GCP
• multi-cloud security architecture