Cloud Security Architect

We are looking for an experienced Cloud Security Architect to design and lead the development of robust security architectures for complex environments.

The ideal candidate will have a strategic mindset, a deep understanding of security principles, and the ability to act as a trusted advisor to clients and internal teams. 

This is an exciting opportunity to shape and lead security architecture for cutting-edge, large-scale projects. 

Responsibilities

• Design secure architectures for cloud infrastructure adhering to best practices and business goals to achieve scalable, resilient and secure solutions.
• Conduct comprehensive risk assessments and threat analysis, identifying vulnerabilities and suggesting security improvements tailored to the organization's profile, infrastructure and data.
• Ensuring security architectures comply with relevant regulations, such as Privacy Protection Regulations and Proper Conduct of Banking Business Directives.
• Collaborate with development teams to design secure CI/CD pipelines and integrate security into the software development lifecycle (SDLC), focusing on implementing security controls, automating vulnerability detection, and ensuring secure code delivery.
• Evaluate and integrate security technologies, ensuring they meet organizational needs and align with best practices.
• Communicate complex security concepts clearly to stakeholders, offering actionable insights and recommendations.
• Stay current with emerging technologies and methodologies to continuously enhance service quality.

Qualifications

• 5+ years of experience in cybersecurity, with a minimum of 2 years hands-on experience in cloud security.
• Strong architectural knowledge AWS-based cloud platforms, with the ability to design secure cloud-native solutions.
• Demonstrated experience in designing and implementing security for containerized applications and Kubernetes clusters. 
• Familiarity with DevSecOps practices and security integration in CI/CD pipelines, with the ability to advise on the implementation of security tools (e.g., SAST, DAST, container security).
• Ability to think strategically about security, balancing business objectives with security risks, and designing long-term security roadmaps and strategies.
• Proven experience acting as a trusted advisor to both internal teams and external customers, helping translate security requirements into actionable strategies.
• Security certifications such as CISSP, CISM, AWS Certified Security Specialty - advantage.