Cloud Security Architect: Zero-Trust DevSecOps Champion

Avaloq AG; Bosco Luganese; On-site; CHF 140,000 - 180,000; Full time

Job summary

Avaloq AG is seeking a Cloud Security Architect to join our Cloud Architecture team in Switzerland. You will design and secure next‑generation cloud platforms and services by combining cloud architecture, security engineering, and automation.

The role emphasizes DevSecOps, security-by-design, and scalable guardrails. You will collaborate with Cloud Architects, Platform Engineers, and DevOps teams to drive secure modernization.

Qualifications

• Experience designing secure cloud architectures for SaaS/PaaS and internal platforms.
• Ability to translate regulatory and security requirements into practical blueprints.
• Proven track record in threat modeling and architecture reviews.

Responsibilities

• Design, govern, and evolve secure cloud architectures for SaaS, PaaS, and internal platforms.
• Define and maintain cloud security standards and reference architectures.
• Embed security-by-design into landing zones, networks, and identity models.
• Drive Zero Trust, least privilege, and defense-in-depth across the cloud landscape.
• Integrate security controls into CI/CD, IaC, and automation frameworks.
• Lead or support security assessments, risk analysis, and architecture reviews.
• Provide architectural guidance for network security and connectivity designs.

Skills

Cloud security expertise

Security architecture

DevSecOps practices

Automation & IaC

Risk assessment

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

GitHub Actions

Cloud platforms (AWS/Azure/GCP)

Job description

Avaloq AG is seeking a Cloud Security Architect to join our Cloud Architecture team in Switzerland. You will design and secure next‑generation cloud platforms and services by combining cloud architecture, security engineering, and automation.

The role emphasizes DevSecOps, security-by-design, and scalable guardrails. You will collaborate with Cloud Architects, Platform Engineers, and DevOps teams to drive secure modernization.