Security Architect

As Security Architect, you will shape security foundations for a cloud-native environment, partnering with Architecture, Engineering, Product and Operations to embed security from the outset. You influence major cloud and security initiatives across GCP, Kubernetes, DevSecOps, and API security, helping the business scale securely. This role blends technology with architecture and strategic thinking, offering ownership over security decisions. You will work closely with engineers to balance security with business needs and compliance requirements.

• Provide security guidance and architectural expertise across platform, application and infrastructure design initiatives
• Partner with Architecture and Engineering to embed security into new products and services from the outset
• Strengthen security controls and architecture across Google Cloud Platform (GCP) environments
• Provide security expertise across Kubernetes and cloud-native environments
• Drive the adoption of DevSecOps and Shift-Left Security practices across engineering teams
• Help strengthen web application and API security, including API gateways, authentication and modern integration architectures
• Design and improve disaster recovery, resilience and security capabilities across critical systems
• Identify architectural and technical security risks and provide pragmatic recommendations balancing security with business objectives
• Support security and compliance initiatives across PCI DSS, GDPR, ISO 27001 and SOC 2
• Work with internal stakeholders and external auditors during security assessments and certification programmes
• Promote secure engineering practices and strengthen security awareness across the organisation

• 5+ years' experience within Cybersecurity, Security Engineering and/or Security Architecture
• Strong commercial Google Cloud Platform (GCP) security experience
• Strong commercial Kubernetes security experience
• Experience designing and implementing security controls across modern cloud-native environments
• Strong understanding of web application security and secure software development
• Experience implementing DevSecOps and Shift-Left Security practices
• Experience working directly with software engineering and architecture teams
• Experience securing APIs, API gateways and modern integration architectures
• Hands-on knowledge of authentication, identity and access management
• Experience with PCI DSS, GDPR, ISO 27001 and/or SOC 2
• Knowledge of vulnerability management, risk assessment and security governance
• Strong communication skills with the ability to influence both technical and non-technical stakeholders
• The ability to balance security requirements with commercial and operational objectives

• strong communication
• ability to influence stakeholders
• collaboration with cross-functional teams
• Google Cloud Platform (GCP) security
• Kubernetes security
• security controls for cloud-native environments