Security Architect

Our client is scaling secure cloud adoption across AWS and Azure within a regulated financial‑services environment. As a Security Architect, you will define secure‑by‑design architecture, landing‑zone guardrails, IAM strategy, network‑security patterns and posture‑management frameworks across both cloud platforms.

This role suits senior architects who want multi‑cloud ownership, influence across engineering, risk and compliance, and the ability to shape enterprise cloud‑security strategy.

Key Responsibilities

• Multi‑Cloud Architecture — design secure landing zones, guardrails and reference architectures across AWS & Azure.
• Identity Architecture — define IAM (AWS) and Entra ID (Azure) governance, federation, PIM/PAM and workload identity models.
• Cloud Posture Management — architect Security Hub, GuardDuty, Defender for Cloud and SIEM integrations.
• IaC Governance — lead Terraform/Bicep/CloudFormation standards, policy‑as‑code and compliance automation.
• Container Security — define EKS/AKS security baselines, runtime protection and workload isolation.
• Architect Zero Trust networking, segmentation, PrivateLink/Private Endpoints, WAF/Shield/Firewall patterns.
• Ensure alignment with GDPR/DSGVO, BSI C5, NIS2, KRITIS.

Experience Needed

• 7+ years in cloud security, with 2+ years in architecture.
• Deep expertise in AWS security (IAM, Security Hub, GuardDuty, KMS, WAF, Shield).
• Deep expertise in Azure security (Entra ID, Defender for Cloud, Key Vault, Private Endpoints).
• Strong Terraform + either Bicep or CloudFormation.
• Strong EKS/AKS security knowledge.

Nice to Have

• BAIT, MaRisk, EBA guidelines.
• Certifications: AWS Security Specialty, AZ‑500, SC‑100, CISSP, CCSP.