Remote Private Cloud Security Architect | DevSecOps Lead

SoCode; Town Of Cambridge; On-site; AUD 67,000 - 76,000; Full time

Benefits offered by this job

Remote

UK Travel

Job summary

SoCode in Cambridge is hiring an Enterprise Security Architect to sit between architecture and engineering on a major on-prem Private Cloud build. This isn’t a public-cloud security role — you’ll shaping the security foundations of a private cloud infrastructure built with open-source stacks and modern platform‑engineering practices.

Embedded full-time within an engineering-led programme, you’ll be the dedicated security partner — threat-modelling the platform, defining secure designs,

Qualifications

• Proven experience building private cloud infrastructure.
• Strong background with open-source infrastructure stacks and platform technologies.
• Deep hands-on security architecture across large-scale data-centre or hybrid environments.
• Strong threat-modelling and attack-path analysis skills.

Responsibilities

• Own and evolve threat modelling across the platform, infra, workloads and onboarding pathways.
• Translate threat stories into engineering requirements and delivery priorities.
• Drive secure-by-design through IaC, CI/CD, policy-as-code and hardened image pipelines.
• Define reusable standards for identity, privileged access, secrets, PKI, segmentation, logging and recovery.
• Translate NIST/STIG frameworks into pragmatic, testable controls.
• Automate posture, evidence and continuous validation across the platform.
• Act as the security conduit across engineering, programme leadership and enterprise security.

Job description

SoCode in Cambridge is hiring an Enterprise Security Architect to sit between architecture and engineering on a major on-prem Private Cloud build. This isn’t a public-cloud security role — you’ll shaping the security foundations of a private cloud infrastructure built with open-source stacks and modern platform‑engineering practices.

Embedded full-time within an engineering-led programme, you’ll be the dedicated security partner — threat-modelling the platform, defining secure designs,