Cloud Security Architect

Avaloq; Bioggio; On-site; CHF 150,000 - 210,000; Full time

Benefits offered by this job

Hybrid work model

Global offices access

Job summary

Avaloq is seeking a passionate Cloud Security Architect to join our Cloud Architecture team. You will design and secure next-generation cloud platforms, embedding security by design across landing zones, networks, and guardrails.

You will drive Zero Trust adoption, manage risk assessments, and collaborate with Platform Engineers and DevOps to implement secure, automated cloud solutions. Hybrid work options in Avaloq offices are available.

Qualifications

• Minimum 5 years of proven experience as an IT Security Architect or Cloud Security Architect in a senior role.
• Experience designing and governing enterprise cloud architectures in Cloud Infrastructure (OCI preferred).
• Experience with Cloud Network Architecture and complex topology management.
• Experience with risk assessments, threat modeling, security architecture reviews, and security-by-design methodologies.
• Hands-on experience with Infrastructure as Code and automation (Terraform/OpenTofu), CI/CD pipelines, GitOps, and Policy-as-Code.

Responsibilities

• Design, govern, and evolve secure cloud architectures for SaaS, PaaS, and internal platforms.
• Define and maintain cloud security standards, patterns, references, and blueprints.
• Embed security-by-design into landing zones, tenancy, network segmentation, and guardrails.

Skills

Cloud security

Zero Trust

IaC automation

Security governance

Threat modeling

CI/CD security

Education

Master’s degree in CS/InfoSec/IT

Tools

Terraform

OpenTofu

Policy-as-Code

GitOps

Job description

We are looking for a passionate Cloud Security Architect to join our Cloud Architecture team. This role combines cloud architecture and security engineering with automation, and DevSecOps practices to help design and secure next-generation cloud platforms and services.

Your Key Tasks

• Design, govern, and continuously evolve secure cloud architectures for SaaS, PaaS, and internal platforms
• Define and maintain cloud security standards, reusable architecture patterns, reference architectures, and security blueprints
• Embed security-by-design principles into landing zones, tenancy structures, network segmentation, identity models, and cloud guardrails
• Drive the adoption of Zero Trust, least-privilege, and defense-in-depth security strategies across the cloud landscape
• Integrate security controls and compliance requirements into CI/CD pipelines, Infrastructure-as-Code (IaC), and platform automation frameworks
• Lead or support security assessments, threat modeling, risk analysis, and architecture reviews
• Provide architectural guidance for network security and connectivity designs across internal, SaaS, and PaaS environments
• Partner with the Network Architecture team to define enterprise network standards and reusable architecture patterns, ensuring secure, scalable, and compliant connectivity solutions across all platforms and environments
• Ensure alignment with regulatory, compliance, and security requirements, translating them into practical and implementable architectural solutions
• Evaluate emerging cloud security technologies and drive continuous improvements in the organization’s security posture

Collaboration & Mentoring

• Work closely with Cloud Architects, Platform Engineers, DevOps teams, Security Operations, and Product teams
• Provide guidance and coaching on secure cloud adoption
• Help drive cloud transformation and modernization initiatives
• Collaborate with engineering teams to improve automation, reliability, and operational security

Master’s degree in Computer Science, Information Security, Information Technology, or a related field

• Minimum 5 years of proven experience as an IT Security Architect, Cloud Security Architect, or in a similar senior security or architecture role
• Experience designing and governing enterprise cloud architectures in Cloud Infrastructure (OCI preferred)
• Experience with Cloud Network Architecture, managing complex network topologies and related topics
• Experience with risk assessments, threat modeling, security architecture reviews, and security-by-design methodologies
• Hands-on experience with Infrastructure as Code and automation technologies such as Terraform/OpenTofu, CI/CD pipelines, GitOps, and Policy-as-Code

The following certifications are considered a strong advantage:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• OCI Security Architect Professional
• OCI certifications in Cloud Security and Network Architecture
• Equivalent architecture or cybersecurity certifications

We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices.

In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self.

We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way.

Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.

Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 11 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues.

We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers …