Cloud Architect

Whizdom; City of Brisbane; On-site; AUD 180,000 - 240,000; Full time

Job summary

Whizdom is seeking a skilled Cloud Security Architect to lead secure AWS architectures in a large enterprise environment in Brisbane. The role focuses on designing and maintaining security controls across identity, network, encryption and data protection throughout the cloud delivery lifecycle.

You will collaborate with cloud engineers, application teams and security stakeholders to strengthen the organisation’s cloud security posture.

Qualifications

• Over 10 years in cyber security architecture and engineering across complex ICT environments.
• Proven design and implementation of secure AWS architectures at scale.
• Strong knowledge of AWS security services (IAM, Organizations, GuardDuty, WAF, KMS).
• Experience with multi-account, landing zones and governance tooling.
• Familiarity with DevSecOps, IaC security and risk assessments.

Responsibilities

• Design and maintain secure AWS cloud architectures aligned with standards and regulatory requirements.
• Develop security architecture across IAM, network security, encryption and data protection.
• Establish security guardrails, patterns for AWS accounts, landing zones and multi-account environments.
• Provide security guidance for cloud infrastructure, platforms and services.
• Conduct architecture reviews, threat modelling and risk assessments.
• Develop secure configuration standards and reusable security controls.
• Support cloud security monitoring, threat detection and vulnerability management.

Skills

AWS security services

Zero Trust

Threat modelling

Security governance

IAM

Multi-account architecture

Security architecture

Cloud security posture management

Tools

AWS Config

CloudTrail/CloudWatch

Job description

Citizenship: Australian citizenship is mandatory

About the Opportunity

A leading technology consultancy is seeking an experienced Cloud Security Architect to support a complex enterprise cloud environment in Brisbane.

This senior role will focus on designing and maintaining secure AWS architectures, establishing reusable security controls and embedding security requirements throughout the cloud delivery lifecycle. You will work with cloud engineers, application teams, infrastructure specialists and security stakeholders to strengthen the organisation’s cloud security posture.

Key Responsibilities

• Design and maintain secure AWS cloud architectures aligned with organisational standards, security policies and regulatory requirements.
• Develop security architecture across identity and access management, network security, encryption, data protection, logging and monitoring.
• Establish security guardrails and architectural patterns for AWS accounts, landing zones, network segmentation and multi-account environments.
• Provide security guidance for AWS infrastructure, applications, platforms and cloud-native services.
• Conduct architecture reviews, threat modelling and security risk assessments.
• Identify security control gaps and recommend appropriate remediation activities.
• Define secure configuration standards, reference architectures and reusable security controls.
• Support AWS-native security monitoring, configuration management, threat detection and vulnerability management.
• Provide security architecture guidance for cloud migration and transformation initiatives.
• Assist with security incident investigations and remediation from an architectural perspective.
• Develop security standards, procedures, risk assessments and technical design documentation.
• Improve cloud security through automation, enhanced governance and optimisation of cloud-native capabilities.

Required Skills and Experience

• At least 10 years of experience in cyber security architecture and engineering across complex ICT environments.
• Demonstrated experience designing and implementing security architectures for large-scale AWS environments.
• Strong knowledge of AWS security services and capabilities, including:
• IAM
• AWS Organizations
• Control Tower
• Security Hub
• GuardDuty
• Inspector
• CloudTrail and CloudWatch
• AWS Config
• KMS and Secrets Manager
• AWS WAF
• Strong understanding of AWS multi-account architecture, landing zones, organisational units, Service Control Policies and cloud governance.
• Experience designing identity, network segmentation, encryption, key management, workload protection and data security controls.
• Practical knowledge of least privilege, defence in depth, Zero Trust and secure-by-design principles.
• Experience conducting cloud security assessments, architectural reviews, threat modelling and risk assessments.
• Understanding of containers, serverless technologies, APIs, DevSecOps, CI/CD pipelines and Infrastructure as Code security.
• Strong knowledge of enterprise security architecture, identity and access management, vulnerability management and security risk management.
• Excellent stakeholder engagement, analytical, documentation, presentation and communication skills.
• Experience designing hybrid or multi-cloud security architectures integrating AWS, Microsoft Azure and on-premises infrastructure.
• AWS Certified Security, AWS Solutions Architect or other relevant cloud and cyber security certifications.
• Experience with Infrastructure as Code, DevSecOps and cloud security posture management.
• Knowledge of automated security controls and continuous compliance capabilities.

Mandatory Requirements

Applicants must:

• Be an Australian citizen.
• Currently reside in Brisbane.