Cloud Network Architect

Avaloq; Bosco Luganese; Hybrid; CHF 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid & flexible working

Inclusive culture

Job summary

Avaloq, a Swiss-based wealth-management technology leader, seeks a Cloud Security Architect to join the Cloud Architecture team. You will design secure cloud architectures for SaaS, PaaS, and internal platforms while embedding security-by-design in landing zones, networks, and guardrails.

Lead or support security assessments, threat modeling, and architecture reviews, driving Zero Trust and least-privilege strategies across the cloud landscape. Hybrid and flexible working options offered.

Qualifications

• Master’s degree in Computer Science, Information Security, Information Technology, or a related field.
• Minimum 5 years of proven experience as an IT Security Architect, Cloud Security Architect, or in a similar senior security or architecture role.
• Experience designing and governing enterprise cloud architectures in Cloud Infrastructure (OCI preferred).
• Experience with Cloud Network Architecture, managing complex network topologies and related topics.
• Experience with risk assessments, threat modeling, security architecture reviews, and security-by-design methodologies.
• Hands-on experience with Infrastructure as Code and automation technologies such as Terraform/OpenTofu, CI/CD pipelines, GitOps, and Policy-as-Code.

Responsibilities

• Design, govern, and continuously evolve secure cloud architectures for SaaS, PaaS, and internal platforms.
• Define and maintain cloud security standards, reusable architecture patterns, reference architectures, and security blueprints.
• Embed security-by-design principles into landing zones, tenancy structures, network segmentation, identity models, and cloud guardrails.
• Drive the adoption of Zero Trust, least-privilege, and defense-in-depth security strategies across the cloud landscape.
• Integrate security controls and compliance requirements into CI/CD pipelines, IaC, and platform automation frameworks.
• Lead or support security assessments, threat modeling, risk analysis, and architecture reviews.
• Provide architectural guidance for network security and connectivity designs across internal, SaaS, and PaaS environments.
• Partner with the Network Architecture team to define enterprise network standards and reusable architecture patterns, ensuring secure, scalable, and compliant connectivity solutions across all platforms and environments.
• Ensure alignment with regulatory, compliance, and security requirements, translating them into practical and implementable architectural solutions.
• Evaluate emerging cloud security technologies and drive continuous improvements in the organization’s security posture.
• Work closely with Cloud Architects, Platform Engineers, DevOps teams, Security Operations, and Product teams.
• Provide guidance and coaching on secure cloud adoption.
• Help drive cloud transformation and modernization initiatives.
• Collaborate with engineering teams to improve automation, reliability, and operational security.

Skills

Cloud security architecture

Threat modeling

Risk assessment

Security-by-design

Infrastructure as Code

CI/CD pipelines

Terraform/OpenTofu

GitOps

Policy as Code

Education

Master’s degree in Computer Science or Information Security

Tools

Terraform/OpenTofu

OCI

CI/CD tooling

Job description

Founded and headquartered in Switzerland, Avaloq is continuously expanding its global footprint with around 2,500 colleagues in 11 countries, and more than 170 clients in 35 countries. We are an industry-leading provider of wealth management technology and services for financial institutions around the world, including private banks and wealth managers, investment managers, as well as retail and neo banks. Our research led approach and continual innovation is powered by the passion and creativity of our colleagues.

We are always looking for talented people to join us on our mission to orchestrate the financial ecosystem and democratize access to wealth management. Avaloq offers the opportunity to work closely with some of the world’s leading financial institutions as we jointly develop and shape careers. Championing a collaborative, supportive and flexible work environment empowers our colleagues to reach their full potential.

Job Description

We are looking for a passionate Cloud Security Architect to join our Cloud Architecture team. This role combines cloud architecture and security engineering with automation, and DevSecOps practices to help design and secure next-generation cloud platforms and services.
Your Key Tasks

• Design, govern, and continuously evolve secure cloud architectures for SaaS, PaaS, and internal platforms
• Define and maintain cloud security standards, reusable architecture patterns, reference architectures, and security blueprints
• Embed security-by-design principles into landing zones, tenancy structures, network segmentation, identity models, and cloud guardrails
• Drive the adoption of Zero Trust, least-privilege, and defense-in-depth security strategies across the cloud landscape
• Integrate security controls and compliance requirements into CI/CD pipelines, Infrastructure-as-Code (IaC), and platform automation frameworks
• Lead or support security assessments, threat modeling, risk analysis, and architecture reviews
• Provide architectural guidance for network security and connectivity designs across internal, SaaS, and PaaS environments
• Partner with the Network Architecture team to define enterprise network standards and reusable architecture patterns, ensuring secure, scalable, and compliant connectivity solutions across all platforms and environments
• Ensure alignment with regulatory, compliance, and security requirements, translating them into practical and implementable architectural solutions
• Evaluate emerging cloud security technologies and drive continuous improvements in the organization's security posture
• Work closely with Cloud Architects, Platform Engineers, DevOps teams, Security Operations, and Product teams
• Provide guidance and coaching on secure cloud adoption
• Help drive cloud transformation and modernization initiatives
• Collaborate with engineering teams to improve automation, reliability, and operational security

Qualifications

• Master’s degree in Computer Science, Information Security, Information Technology, or a related field
• Minimum 5 years of proven experience as an IT Security Architect, Cloud Security Architect, or in a similar senior security or architecture role
• Experience designing and governing enterprise cloud architectures in Cloud Infrastructure (OCI preferred)
• Experience with Cloud Network Architecture, managing complex network topologies and related topics
• Experience with risk assessments, threat modeling, security architecture reviews, and security-by-design methodologies
• Hands-on experience with Infrastructure as Code and automation technologies such as Terraform/OpenTofu, CI/CD pipelines, GitOps, and Policy-as-Code

The following certifications are considered a strong advantage:

• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• OCI Security Architect Professional
• OCI certifications in Cloud Security and Network Architecture
• Equivalent architecture or cybersecurity certifications

Additional Information

We realize that managing work life balance is a challenge we all face in our daily lives and in order to support with this we are pleased to offer hybrid and flexible working for most of our Avaloqers to maintain work life balance and still continue our fantastic Avaloq culture in our global offices.

In Avaloq we are proud to embrace diversity and understand the success of our business is built on the power of different opinions, we are whole heartedly committed to fostering an equal opportunity environment and inclusive culture where you can be your true authentic self.

We hire, compensate and promote regardless of origin, age, gender identity, sexual orientation or any other fantastic traits that make us all unique, we have done our best to write this advert in an inclusive and neutral way.

Please be aware that we will not accept speculative CV submissions for any of our roles from recruitment agencies, and any unsolicited candidate submissions will be exempt from any payment expectations.