Cloud Security Architect

Avaloq AG; Bosco Luganese; On-site; CHF 140,000 - 180,000; Full time

Job summary

Avaloq AG is seeking a Cloud Security Architect to join our Cloud Architecture team in Switzerland. You will design and secure next‑generation cloud platforms and services by combining cloud architecture, security engineering, and automation.

The role emphasizes DevSecOps, security-by-design, and scalable guardrails. You will collaborate with Cloud Architects, Platform Engineers, and DevOps teams to drive secure modernization.

Qualifications

• Experience designing secure cloud architectures for SaaS/PaaS and internal platforms.
• Ability to translate regulatory and security requirements into practical blueprints.
• Proven track record in threat modeling and architecture reviews.

Responsibilities

• Design, govern, and evolve secure cloud architectures for SaaS, PaaS, and internal platforms.
• Define and maintain cloud security standards and reference architectures.
• Embed security-by-design into landing zones, networks, and identity models.
• Drive Zero Trust, least privilege, and defense-in-depth across the cloud landscape.
• Integrate security controls into CI/CD, IaC, and automation frameworks.
• Lead or support security assessments, risk analysis, and architecture reviews.
• Provide architectural guidance for network security and connectivity designs.

Skills

Cloud security expertise

Security architecture

DevSecOps practices

Automation & IaC

Risk assessment

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

GitHub Actions

Cloud platforms (AWS/Azure/GCP)

Job description

We are looking for a passionate Cloud Security Architect to join our Cloud Architecture team. This role combines cloud architecture and security engineering with automation, and DevSecOps practices to help design and secure next-generation cloud platforms and services.

Your Key Tasks

• Design, govern, and continuously evolve secure cloud architectures for SaaS, PaaS, and internal platforms
• Define and maintain cloud security standards, reusable architecture patterns, reference architectures, and security blueprints
• Embed security-by-design principles into landing zones, tenancy structures, network segmentation, identity models, and cloud guardrails
• Drive the adoption of Zero Trust, least-privilege, and defense-in-depth security strategies across the cloud landscape
• Integrate security controls and compliance requirements into CI/CD pipelines, Infrastructure-as-Code (IaC), and platform automation frameworks
• Lead or support security assessments, threat modeling, risk analysis, and architecture reviews
• Provide architectural guidance for network security and connectivity designs across internal, SaaS, and PaaS environments
• Partner with the Network Architecture team to define enterprise network standards and reusable architecture patterns, ensuring secure, scalable, and compliant connectivity solutions across all platforms and environments
• Ensure alignment with regulatory, compliance, and security requirements, translating them into practical and implementable architectural solutions
• Evaluate emerging cloud security technologies and drive continuous improvements in the organization's security posture

Collaboration & Mentoring

• Work closely with Cloud Architects, Platform Engineers, DevOps teams, Security Operations, and Product teams
• Provide guidance and coaching on secure cloud adoption
• Help drive cloud transformation and modernization initiatives
• Collaborate with engineering teams to improve automation, reliability, and operational security