Cloud Security Architect

About the role

The Cloud Security Architect will design secure, scalable and resilient cloud infrastructures, working closely with product, engineering, QA, compliance and ISMS teams to embed security by design. The role requires deep expertise in cloud security architectures and secure DevOps practices.

Key responsibilities

• Architecture design: create high‑level and low‑level design blueprints for secure public and private cloud environments.
• Define and implement cloud security strategy, standards, policies and road‑maps aligned with business goals.
• Design and manage security tools such as firewalls, SIEM, intrusion detection/prevention systems and encryption solutions.
• Conduct threat modelling, vulnerability assessments and penetration testing, and support risk management activities.
• Ensure compliance with standards such as ISO 27001, ISO 27017 and NIST CSF, and embed security into DevSecOps pipelines.
• Define IAM roles, policies and access controls, and oversee cloud application security testing and monitoring.

Required profile

• 5+ years of experience in cloud security and cloud architecture design.
• Strong knowledge of public cloud platforms, especially AWS, and experience with Azure or platform‑independent environments.
• Proficiency in network security, virtualization, containers (Docker, Kubernetes) and API security.
• Relevant certifications such as CISSP, CCSP, AWS Certified Security or Azure Security Engineer.
• Excellent communication, collaborative mindset and ability to work under pressure.

Required skills

• AWS cloud services
• Azure security services
• Network security and firewalls
• SIEM solutions
• Threat modelling (e.g., PASTA)
• Vulnerability assessment and penetration testing
• Container security (Docker, Kubernetes)
• IAM design and policy management
• Cryptography protocols