Cloud Security Architect

Talent; City of Melbourne; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Melbourne CBD location

Hands-on architecture role

Cloud security focus across platforms

Job summary

Talent in Melbourne seeks a hands-on Cloud Security Architect or Senior Cloud Engineer to drive secure-by-design patterns. You will partner with cloud, platform and infra teams to translate security requirements into practical guardrails and reusable patterns for cloud workloads.

The role emphasizes GCP expertise with exposure to AWS/Azure, Terraform/IaC, and secure Kubernetes/serverless environments. A six-month contract with hybrid Melbourne CBD arrangements is offered.

Qualifications

• Hands-on background in cloud security engineering or architecture.
• Strong GCP foundations with AWS/Azure exposure.
• Practical Terraform and IaC experience.
• Experience securing Kubernetes and serverless workloads.
• Understanding of identity, secrets, logging and controls.
• Ability to produce diagrams, guardrails and recommendations.

Responsibilities

• Embed with delivery teams to ensure secure by design.
• Define cloud foundation security patterns, landing zones and controls.
• Produce reference architectures, standards and guardrails.
• Develop secure patterns for Kubernetes, containers and serverless workloads.
• Integrate security into Terraform, IaC, CI/CD and policy-as-code.
• Provide guidance on cloud security posture and risk decisions.

Skills

Cloud security engineering

GCP expertise

Kubernetes security

Terraform / IaC

Security patterns

CI/CD security

Identity & secrets

Tools

Terraform

GitHub Actions

OpenTelemetry

SIEM integration

Cloud security tooling

Job description

This is a hands-on security architecture opportunity within a large, regulated enterprise undergoing significant cloud and platform modernisation.

The role is particularly suited to a Senior Cloud Engineer, Cloud Security Engineer or Cloud Architect who has recently moved into architecture. You will remain close to delivery, partnering directly with cloud, platform and infrastructure teams to translate security requirements into practical patterns, reusable guardrails and secure-by-default capabilities.

Strong GCP experience will be highly relevant, supported by exposure to AWS and Azure environments.

Key Responsibilities

• Embed within cloud, platform and infrastructure delivery teams to ensure new services and workloads are secure by design.
• Define cloud foundation security patterns covering landing zones, organisational structures, identity, logging and policy controls.
• Produce reusable reference architectures, standards, architecture decision records and implementation guardrails.
• Develop secure patterns for Kubernetes, containerised workloads, serverless services, workload identities, secrets and hardened images.
• Integrate security controls into Terraform, infrastructure-as-code, CI/CD pipelines and policy-as-code frameworks.
• Provide practical guidance across database security, cloud security posture, AI-enabled services and technical risk decisions.

Must-Have Experience

• Strong hands-on background in cloud engineering, cloud security engineering or cloud architecture, with recent ownership of architecture or technical design decisions.
• Deep experience with GCP cloud foundations, supported by working knowledge of AWS or Azure security environments.
• Practical experience with Terraform, infrastructure-as-code and automated security control enforcement.
• Experience securing Kubernetes, containers, serverless platforms or other cloud-native workload environments.
• Strong understanding of cloud identity, workload identities, secrets management, logging and cloud security controls.
• Ability to work directly with engineers while producing clear architecture diagrams, standards, guardrails and stakeholder recommendations.

Nice-to-Have Experience

• CNAPP, cloud security posture management or cloud vulnerability governance platforms.
• GitHub Advanced Security, GitHub Actions or DevSecOps pipeline security.
• Database security, including encryption, key management, masking and private connectivity.
• Security architecture for AI-enabled, isolated or untrusted workloads.
• OpenTelemetry, security observability or SIEM integration.
• CCSP, CISSP, SABSA or relevant cloud security certifications.

What's on Offer

• Initial six-month contract with potential for extension.
• Melbourne CBD location with hybrid working arrangements.
• Hands-on architecture role that remains closely aligned with engineering delivery.
• Broad remit across cloud foundations, platform engineering, databases and emerging technologies.
• Opportunity to establish reusable security patterns adopted across multiple delivery teams.
• Collaborative enterprise environment with significant investment in cloud and security capability.

Cloud Security Architect • Melbourne, VIC, AU