Security Architect (Cloud Security)

The Role

As a Security Architect, you will be responsible for providing security leadership across cloud projects, ensuring that solutions are designed and implemented in line with security requirements, industry standards, and organisational policies.

You will assess risks, develop security architectures, conduct security reviews, and provide expert guidance on securing cloud infrastructure and services across complex environments. This position is primarily remote, although candidates must be willing to travel to client sites when required.

Key Responsibilities

• Design and develop secure cloud architectures aligned with business and security requirements.
• Provide technical leadership on cloud security initiatives and transformation programmes.
• Conduct cloud security assessments and risk reviews across cloud environments.
• Define and maintain cloud security standards, patterns, and reference architectures.
• Support the secure design and implementation of cloud infrastructure and services.
• Review solution designs and provide security recommendations throughout the project lifecycle.
• Collaborate with architects, engineers, project teams, and stakeholders to ensure security requirements are met.
• Identify security risks, vulnerabilities, and control gaps, providing mitigation recommendations.
• Support governance, risk, compliance, and assurance activities.
• Contribute to security roadmaps and continuous improvement initiatives.
• Provide guidance on cloud security monitoring, threat management, and incident response capabilities.
• Support managed cloud security service engagements where required.

Essential Skills & Experience

• Proven experience working as a Security Architect within complex enterprise or government environments.
• Strong expertise in: Cloud Security Planning, Cloud Infrastructure Security, Cloud Security Architecture, Cloud Security Assessments, Managed Cloud Security Services.
• Experience designing secure cloud solutions within AWS, Azure, or multi-cloud environments.
• Deep understanding of security architecture principles, frameworks, and best practices.
• Experience conducting security reviews, threat modelling, and risk assessments.
• Strong knowledge of identity and access management, network security, encryption, and security monitoring.
• Experience integrating security into cloud transformation and migration programmes.
• Ability to communicate security concepts effectively to both technical and non-technical stakeholders.
• Excellent stakeholder management and consultancy skills.

Desirable Experience

• Experience within public sector, government, defence, or highly regulated environments.
• Knowledge of Zero Trust security principles.
• Experience with cloud-native security tooling and security automation.
• Familiarity with NIST, ISO 27001, CIS Controls, or similar security frameworks.
• Experience supporting DevSecOps and secure software delivery practices.
• Relevant cloud and security certifications such as: CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, TOGAF.

Key Competencies

• Cloud Security Architecture
• Security Risk Assessment
• Cloud Infrastructure Security
• Security Governance
• Threat Modelling
• Stakeholder Engagement
• Security Assurance
• Problem Solving
• Strategic Thinking
• Technical Leadership