Cloud Security Architect: Zero Trust & IaC Leader

Avaloq; Bosco Luganese; Hybride; CHF 140 000 - 200 000; Plein temps

Avantages offerts par ce poste

Hybrid & flexible working

Inclusive culture

Résumé du poste

Avaloq, a Swiss-based wealth-management technology leader, seeks a Cloud Security Architect to join the Cloud Architecture team. You will design secure cloud architectures for SaaS, PaaS, and internal platforms while embedding security-by-design in landing zones, networks, and guardrails.

Lead or support security assessments, threat modeling, and architecture reviews, driving Zero Trust and least-privilege strategies across the cloud landscape. Hybrid and flexible working options offered.

Qualifications

• Master’s degree in Computer Science, Information Security, Information Technology, or a related field.
• Minimum 5 years of proven experience as an IT Security Architect, Cloud Security Architect, or in a similar senior security or architecture role.
• Experience designing and governing enterprise cloud architectures in Cloud Infrastructure (OCI preferred).
• Experience with Cloud Network Architecture, managing complex network topologies and related topics.
• Experience with risk assessments, threat modeling, security architecture reviews, and security-by-design methodologies.
• Hands-on experience with Infrastructure as Code and automation technologies such as Terraform/OpenTofu, CI/CD pipelines, GitOps, and Policy-as-Code.

Responsabilités

• Design, govern, and continuously evolve secure cloud architectures for SaaS, PaaS, and internal platforms.
• Define and maintain cloud security standards, reusable architecture patterns, reference architectures, and security blueprints.
• Embed security-by-design principles into landing zones, tenancy structures, network segmentation, identity models, and cloud guardrails.
• Drive the adoption of Zero Trust, least-privilege, and defense-in-depth security strategies across the cloud landscape.
• Integrate security controls and compliance requirements into CI/CD pipelines, IaC, and platform automation frameworks.
• Lead or support security assessments, threat modeling, risk analysis, and architecture reviews.
• Provide architectural guidance for network security and connectivity designs across internal, SaaS, and PaaS environments.
• Partner with the Network Architecture team to define enterprise network standards and reusable architecture patterns, ensuring secure, scalable, and compliant connectivity solutions across all platforms and environments.
• Ensure alignment with regulatory, compliance, and security requirements, translating them into practical and implementable architectural solutions.
• Evaluate emerging cloud security technologies and drive continuous improvements in the organization’s security posture.
• Work closely with Cloud Architects, Platform Engineers, DevOps teams, Security Operations, and Product teams.
• Provide guidance and coaching on secure cloud adoption.
• Help drive cloud transformation and modernization initiatives.
• Collaborate with engineering teams to improve automation, reliability, and operational security.

Connaissances

Cloud security architecture

Threat modeling

Risk assessment

Security-by-design

Infrastructure as Code

CI/CD pipelines

Terraform/OpenTofu

GitOps

Policy as Code

Formation

Master’s degree in Computer Science or Information Security

Outils

Terraform/OpenTofu

OCI

CI/CD tooling

Description du poste

Avaloq, a Swiss-based wealth-management technology leader, seeks a Cloud Security Architect to join the Cloud Architecture team. You will design secure cloud architectures for SaaS, PaaS, and internal platforms while embedding security-by-design in landing zones, networks, and guardrails.

Lead or support security assessments, threat modeling, and architecture reviews, driving Zero Trust and least-privilege strategies across the cloud landscape. Hybrid and flexible working options offered.