Cloud Security Architect: Zero-Trust & IaC Leader

Avaloq Group; Bioggio; Hybrid; CHF 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work model

Flexible working hours

Job summary

Avaloq Group is seeking a Cloud Security Architect to join the Cloud Architecture team in Switzerland. The role combines cloud design, security engineering, and automation to secure modern cloud platforms and services.

You will define standards, embed security-by-design, and drive Zero Trust and defense-in-depth strategies across SaaS, PaaS, and internal environments, collaborating with multiple engineering squads.

Qualifications

• Master’s degree in Computer Science, Information Security, Information Technology, or a related field.
• Minimum 5 years as IT Security Architect, Cloud Security Architect, or similar senior role.
• Experience designing and governing enterprise cloud architectures in Cloud Infrastructure (OCI preferred).
• Experience with Cloud Network Architecture and complex topologies.
• Hands-on with IaC and automation technologies such as Terraform/OpenTofu, CI/CD, GitOps, and Policy-as-Code.

Responsibilities

• Design, govern, and evolve secure cloud architectures for SaaS, PaaS, and internal platforms.
• Define and maintain cloud security standards, reference architectures, and security blueprints.
• Embed security-by-design principles into landing zones and network segmentation.
• Lead or support security assessments, threat modeling, and architecture reviews.
• Provide architectural guidance for network security and connectivity designs across environments.
• Collaborate with engineering teams to improve automation, reliability, and security.

Skills

Cloud Security

Security Architecture

DevSecOps

Risk Analysis

Threat Modeling

Education

Master's degree in CS/InfoSec

Tools

Terraform/OpenTofu

CI/CD Pipelines

GitOps

Policy-as-Code

OCI Architecture

Job description

Avaloq Group is seeking a Cloud Security Architect to join the Cloud Architecture team in Switzerland. The role combines cloud design, security engineering, and automation to secure modern cloud platforms and services.

You will define standards, embed security-by-design, and drive Zero Trust and defense-in-depth strategies across SaaS, PaaS, and internal environments, collaborating with multiple engineering squads.