Cloud Security Architect

Talent International; City of Melbourne; Hybrid; AUD 165,000 - 317,000; Part time

Benefits offered by this job

Hybrid work

Melbourne CBD location

Job summary

Talent International is seeking a hands-on security architecture professional for a six-month engagement in Melbourne. You will work closely with cloud, platform and infrastructure teams to translate security requirements into practical patterns, guardrails and secure-by-default capabilities.

Strong GCP experience is essential, with exposure to AWS or Azure, and practical Terraform/IaC and Kubernetes security work.

Qualifications

• Senior-level cloud security/architecture experience with design ownership.
• Deep GCP foundations with AWS/Azure knowledge.
• Hands-on Terraform, IaC, and policy enforcement experience.
• Experience securing Kubernetes, containers, and serverless workloads.
• Strong understanding of identity, secrets, logging, and controls.

Responsibilities

• Embed with cloud, platform and infra teams to ensure secure-by-design workloads.
• Define cloud foundation security patterns: landing zones, org structures, identity, logging, policy.
• Produce reference architectures, standards and guardrails for implementations.
• Develop secure patterns for Kubernetes, containers, serverless, workload identities, secrets, images.
• Integrate security controls into Terraform, IaC, CI/CD and policy-as-code.
• Provide guidance on database security, cloud posture and technical risk decisions.

Skills

Cloud security engineering

Architecture decisions

Hands-on cloud engineering

Security patterns & guardrails

Cloud identity & secrets

Communication with engineers

Tools

Terraform

CI/CD security tooling

Kubernetes security

Job description

This is a hands-on security architecture opportunity within a large, regulated enterprise undergoing significant cloud and platform modernisation.

The role is particularly suited to a Senior Cloud Engineer, Cloud Security Engineer or Cloud Architect who has recently moved into architecture. You will remain close to delivery, partnering directly with cloud, platform and infrastructure teams to translate security requirements into practical patterns, reusable guardrails and secure-by-default capabilities.

Strong GCP experience will be highly relevant, supported by exposure to AWS and Azure environments.

Key Responsibilities

• Embed within cloud, platform and infrastructure delivery teams to ensure new services and workloads are secure by design.
• Define cloud foundation security patterns covering landing zones, organisational structures, identity, logging and policy controls.
• Produce reusable reference architectures, standards, architecture decision records and implementation guardrails.
• Develop secure patterns for Kubernetes, containerised workloads, serverless services, workload identities, secrets and hardened images.
• Integrate security controls into Terraform, infrastructure-as-code, CI/CD pipelines and policy-as-code frameworks.
• Provide practical guidance across database security, cloud security posture, AI-enabled services and technical risk decisions.

Must-Have Experience

• Strong hands-on background in cloud engineering, cloud security engineering or cloud architecture, with recent ownership of architecture or technical design decisions.
• Deep experience with GCP cloud foundations, supported by working knowledge of AWS or Azure security environments.
• Practical experience with Terraform, infrastructure-as-code and automated security control enforcement.
• Experience securing Kubernetes, containers, serverless platforms or other cloud-native workload environments.
• Strong understanding of cloud identity, workload identities, secrets management, logging and cloud security controls.
• Ability to work directly with engineers while producing clear architecture diagrams, standards, guardrails and stakeholder recommendations.

Nice-to-Have Experience

• CNAPP, cloud security posture management or cloud vulnerability governance platforms.
• GitHub Advanced Security, GitHub Actions or DevSecOps pipeline security.
• Database security, including encryption, key management, masking and private connectivity.
• Security architecture for AI-enabled, isolated or untrusted workloads.
• OpenTelemetry, security observability or SIEM integration.
• CCSP, CISSP, SABSA or relevant cloud security certifications.

What’s on Offer

• Initial six-month contract with potential for extension.
• Melbourne CBD location with hybrid working arrangements.
• Hands-on architecture role that remains closely aligned with engineering delivery.
• Broad remit across cloud foundations, platform engineering, databases and emerging technologies.
• Opportunity to establish reusable security patterns adopted across multiple delivery teams.
• Collaborative enterprise environment with significant investment in cloud and security capability.