Azure Cloud Security Architect

GCS; Birmingham; On-site; GBP 90,000 - 120,000; Full time

Job summary

GCS is seeking a Senior Cloud Security Architect to design secure architectures for Azure and multi-cloud environments. You will lead security strategy and collaborate with engineering teams to shift applications and data to the cloud securely.

The role requires hands-on threat modeling, hardened configurations, and strong knowledge of cloud services. You will work with security governance and respond to evolving cyber threats.

Qualifications

• Must have cloud security architecture experience on Azure.
• AWS and GCP security architecture experience preferred.
• Proven experience architecting and delivering cloud/internet-facing applications.
• Ability to produce hardened configuration standards for cloud services.
• Threat modeling experience.
• Proficiency with PowerShell, Java, C/C++, Python, JavaScript.
• Hands-on with ARM templates and Terraform.
• Excellent cybersecurity governance, risk management and incident response knowledge.
• Understanding of financial industry cybersecurity laws and ethics.

Responsibilities

• Support project teams in designing secure architectures for environments and infrastructure.
• Identify requirements and embed them into Azure environments and security control design.
• Collaborate across the organization to deliver artifacts enabling cloud movement (strategy, target state, roadmaps, statements, concepts, specs).
• Provide a detailed understanding of cloud security, threat landscape, and risks.
• Be hands-on, guiding engineering and development teams, influencing decisions, and communicating strategy.
• Lead across disciplines (security architecture, compute, storage, networking, virtualization, data centre, API integration, Kubernetes, Docker, OpenStack, DevSecOps, service delivery).
• Lead through influence and communicate with stakeholders to reach target state.
• Collaborate with security architects, engineers, developers, application owners and senior management.

Skills

Azure security

Cloud security

Threat modeling

Programming languages

Security architecture

DevSecOps

Tools

Kubernetes

Docker

OpenStack

Terraform

ARM templates

Job description

Key responsibilities:

• -Support project teams in designing secure architectures for environments and infrastructure
• Identify and gather project-specific requirements, and embed them into Azure environments and security control design
• -Collaborate across within organization to identify, deliver, and document the required artifacts to enable movement of applications and data to the cloud, including strategy, target state, technical roadmaps, position statements, concepts, and logical specifications
• -Provide a detailed understanding of cloud security and cloud infrastructure services, threat landscape and attack scenario's, risks
• -Be hands-on, directly interacting with the engineering and application development teams, providing leadership to drive security requirements, influence decision makers, build relationships, and communicate strategy and architecture to the broader internal community. You must be able to influence and work collaboratively to guide the developers, engineers and architects towards the desired target state
• -Possess significant breadth across other disciplines (e.g., enterprise security architecture, compute services, storage, large-scale networking, virtualization, data centre, integration architecture (API), orchestration technologies (Kubernetes, Docker, open stack), systems resiliency, service support, Secure application development lifecycle management (DevSecOps), and service delivery)
• -Lead through influence, communicate effectively through clarity of thought and demonstrated understanding of business and technical requirements
• -Be a strong technologist with pragmatic view and creative mind, and a natural collaborator with line of business security architects, engineers, developers, application owners, service providers, and senior management

To be successful in this role you should meet the following requirements:

• -Must have experience of Cloud security architecture on Azure Deep knowledge of broader Microsoft technology portfolio and solutions
• -Cloud security architecture experience on AWS and GCP (preferred)
• -Demonstratable experience increasing responsibility architecting, positioning and delivering cloud/internet facing applications
• -Ability to provide direction and guidance on architectural use cases and requirements hold on skip. Actually no error.
• -Ability to produce hardened configuration standards for cloud services
• -Threat modeling experience;
• -Preferred experience with one or more general purpose programming languages including but not limited to: PowerShell scripting, Java, C/C++, Python, JavaScript and understanding of software vulnerabilities
• -Hands on experience with ARM templates and Terraform
• -Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies
• -Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity
• -Noted cybersecurity expert, keeping technical skills current and participating in multiple forums;