Cloud Security Architect

Role & responsibilities

• Design and implement secure, scalable cloud architectures across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Define cloud security strategies, policies, standards, and best practices aligned with business requirements and industry regulations.
• Implement Identity and Access Management (IAM), Role-Based Access Control (RBAC), Multi-Factor Authentication (MFA), and Zero Trust security principles.
• Secure cloud infrastructure, networks, workloads, containers, APIs, applications, and data through appropriate security controls.
• Conduct cloud security assessments, threat modelling, vulnerability assessments, and architecture reviews to identify and mitigate risks.
• Implement encryption, key management, secrets management, data protection, and secure backup and recovery solutions.
• Integrate security controls into CI/CD pipelines and DevSecOps workflows to enable continuous security validation.
• Monitor cloud environments using SIEM, CSPM, and other security tools to detect threats, investigate incidents, and coordinate remediation.
• Ensure compliance with security frameworks and standards such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and applicable regulatory requirements.
• Collaborate with cloud engineers, DevOps teams, application developers, compliance teams, and business stakeholders to embed security throughout the software development lifecycle.
• Develop cloud security reference architectures, technical documentation, security guidelines, and incident response procedures.
• Evaluate emerging cloud security technologies and recommend improvements to strengthen the organisation's security posture.

Preferred candidate profile

• Bachelor's or master's degree in Computer Science, Information Technology, Cybersecurity, Information Security, or a related field.
• 5 to 10 years of experience in cybersecurity, cloud engineering, infrastructure security, or information security, including hands-on cloud security architecture experience.
• Strong expertise in at least one major cloud platform: AWS, Microsoft Azure, or Google Cloud Platform; multi-cloud experience is an advantage.
• In-depth knowledge of IAM, network security, encryption, key management, secrets management, Zero Trust, and cloud-native security services.
• Practical experience with cloud security tools, CSPM solutions, SIEM platforms, vulnerability management, and incident response.
• Proficiency in Infrastructure as Code tools such as Terraform or CloudFormation, scripting languages such as Python or Bash, and DevSecOps practices.
• Understanding of container security, Docker, Kubernetes, API security, and CI/CD pipeline protection.
• Knowledge of security and compliance frameworks such as ISO 27001, NIST, CIS Benchmarks, SOC 2, and relevant data protection requirements.
• Strong skills in threat modelling, risk assessment, security architecture reviews, and security control implementation.
• Excellent analytical, problem-solving, communication, and stakeholder-management skills.
• Ability to translate business and regulatory requirements into practical cloud security solutions.
• Preferred certifications: AWS Certified Security Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, CCSP, or CISSP.