Cloud Security Architect – Financial Services
Posted 5 days ago by ST Global Tech LLC
Negotiable
Undetermined
Remote
United Kingdom
Summary: The Cloud Security Architect role focuses on designing and implementing secure cloud architectures specifically for the financial services sector, utilizing Google Cloud Platform (GCP) services. The position requires extensive experience in cybersecurity and cloud security architecture, with a strong emphasis on compliance and security frameworks. Candidates must possess relevant certifications and a deep understanding of the financial industry. The role is flexible with remote working options available across EMEA timings.
Key Responsibilities:
- Design and implement scalable, secure, and compliant cloud architectures for financial institutions.
- Leverage Google Cloud Platform (GCP) services and security frameworks, including Zero Trust Architecture.
- Integrate security into CI/CD pipelines using DevSecOps methodologies.
- Develop security policies using IAM, KMS, DLP, and SIEM/SOAR tools.
- Monitor and manage security tools and services on GCP.
- Collaborate with teams to ensure adherence to security best practices and compliance requirements.
Key Skills:
- Google Cloud Professional Architect and Google Cloud Professional Security Architect certifications.
- Bachelor's or Master’s degree in Computer Science, Information Security, or related field.
- 10+ years of experience in cybersecurity, with 3+ years in cloud security architecture.
- 5+ years of experience in cloud security engineering, particularly with GCP.
- Hands-on expertise with GCP security tools and services.
- Proficiency in scripting languages (e.g., Python, Go, Bash).
- Experience with Infrastructure as Code (IaC) tools, especially Terraform.
- Strong understanding of network security principles and their implementation on GCP.
- Familiarity with security frameworks (e.g., NIST, MITRE ATT&CK, OWASP Top 10).
Salary (Rate): undetermined
City: undetermined
Country: United Kingdom
Working Arrangements: remote
IR35 Status: undetermined
Seniority Level: undetermined
Industry: IT
Cloud Security Architect – Financial Services
Location: UK (Flexible / Remote EMEA Timings)
Certification: Google Cloud Professional Architect (Mandatory) and Google Cloud Professional Security Architect.
Looking for an experienced Cloud Security Architect with a deep understanding of the financial services industry. This role will focus on designing and implementing scalable, secure, and compliant cloud architectures for financial institutions, leveraging Google Cloud Platform (GCP) services and best-in-class security frameworks including Zero Trust Architecture.
Required Qualifications
Bachelor's or Master’s degree in Computer Science, Information Security, or a related technical field, or equivalent practical experience.
10+ years of experience in cybersecurity, with at least 3 years focused on cloud security architecture.
5+ years of experience in cloud security engineering, with a strong focus on Google Cloud Platform (GCP).
Extensive experience in the financial services industry including banking, insurance, or capital markets.
Hands-on expertise with GCP security tools (e.g., Identity Aware Proxy, BeyondCorp Enterprise, VPC SC, Cloud Armor).
Proven experience with Zero Trust Architecture and secure design principles for cloud and hybrid systems.
Proven experience with DevSecOps methodologies and integrating security into CI/CD pipelines.
Hands-on experience with GCP security services including IAM, VPC Service Controls, Cloud Armor, KMS, Security Command Center.
Fluency in designing security policies using IAM, KMS, DLP, and SIEM/SOAR tools.
Strong understanding of network security principles (firewalls, VPNs, load balancing, DNS) and their implementation on GCP.
Proficiency in at least one scripting language (e.g., Python, Go, Bash) for automation and security tool development.
Experience with Infrastructure as Code (IaC) tools, particularly Terraform.
Solid understanding of security monitoring, logging, and alerting concepts.
Familiarity with common security frameworks (e.g., NIST, MITRE ATT&CK, OWASP Top 10).