Cloud Architect

HelloKindred; Greater London; Hybrid; GBP 91,000 - 123,000; Full time

Job summary

HelloKindred in London seeks a Cloud Architect to define and govern Azure, hybrid infrastructure and security platforms. You will lead senior technical designs, ensure secure and scalable solutions, and align with the client’s technology strategy.

The role requires strong Azure expertise, governance knowledge, and experience with IaC, Terraform and Azure DevOps in a complex enterprise setting. This is a hybrid London-based position with 37.5 hours per week.

Qualifications

• CCSP/CISSP or equivalent cloud security cert.
• Strong Microsoft Azure architecture across networking, identity, security and governance.
• Experience with landing zones, RBAC, PIM and policy controls.
• Experience in hybrid infrastructure design and Zero Trust security.

Responsibilities

• Define and maintain target-state architecture for Azure, hybrid platforms and security.
• Set architectural guardrails including Azure Policy, RBAC, PIM, private connectivity.
• Design AD/Entra ID, DNS, PKI integration for hybrid environments.
• Create secure network designs across cloud and on-premise with Zero Trust.
• Define security patterns across cloud, identity, network and infrastructure.
• Lead architecture governance, design assurance and standards.
• Support cloud migration, transformation and modernisation projects.
• Provide IaC guidance with Terraform and Azure DevOps.

Skills

Azure architecture

Security architecture

Identity management

Cloud governance

Stakeholder management

Education

Azure Solutions Architect Expert

TOGAF or framework knowledge

Azure Security Engineer / CCNP / Terraform Associate

FinOps and cost optimisation

Tools

Terraform

Azure DevOps

Active Directory

Azure Policy

Entra ID

Job description

HelloKindred are specialists in staffing marketing, creative and technology roles, offering a range of talent solutions that can be delivered on-site, remotely or hybrid.

Our vision is to make work accessible and people’s lives better.We do this by disrupting traditional employment barriers –connecting ambitious talent to flexible opportunities with trusted brands.

Job Description

Job title: Cloud Architect
Work Setup: Hybrid, 15 St Botolph Street, London EC3A 7QU [confirm: 40% office / 60% remote, or 2 days a week onsite]
Contract End Date / Length: 28 February 2027, with possible extension
Rate: £580 per day [confirm]
Clearance Required: BPSS
Engagement: PAYE via umbrella company only
Hours: 37.5 per week

Our client in the financial services industry is looking for a Cloud Architect to define and govern the architecture of its cloud, hybrid infrastructure and security platforms. The role provides senior technical leadership across Microsoft Azure, networking, identity, security and resilience, ensuring solutions are secure, scalable and aligned with the client’s technology strategy.

What you will do:

• Define and maintain the target-state architecture for Microsoft Azure, cloud and hybrid platforms, including landing zones, networking, identity, governance and monitoring.
• Set architectural principles and guardrails covering Azure Policy, RBAC, PIM, private connectivity and platform governance.
• Define the target-state architecture for hybrid infrastructure and its integration with Azure, including Active Directory, Entra ID, DNS, DHCP and PKI.
• Define secure network architecture across cloud and hybrid environments, aligned with Zero Trust principles.
• Define security architecture patterns across cloud, identity, network and infrastructure, including Microsoft Defender, Sentinel, Conditional Access and Key Vault.
• Define architecture patterns for availability, resilience, backup and disaster recovery, and identify single points of failure.
• Act as a key member of the Technology Design Authority, providing design assurance for technology solutions and major changes.
• Maintain architecture principles, standards, decision records and documentation.
• Contribute to cloud, infrastructure, network and security roadmaps, including migration, modernisation and transition architectures.
• Provide architectural direction for Infrastructure as Code and automated provisioning, including Terraform and Azure DevOps.
• Assess emerging technologies, including AI-enabled services, and their architecture and security implications.
• Provide architecture input into technology investment decisions and clear recommendations to senior stakeholders.

What we’re looking for:

• CCSP, CISSP or an equivalent industry-recognised cloud or security certification.
• Strong knowledge of Microsoft Azure architecture across networking, identity, security, compute, storage, monitoring and governance.
• Strong knowledge of Azure landing zones, management groups, Azure Policy, RBAC, PIM and cloud governance.
• Strong enterprise networking and security knowledge, including routing, segmentation, firewalls, VPNs and private connectivity.
• Advanced knowledge of Active Directory, Entra ID, Conditional Access, MFA, SSO and certificates.
• Strong understanding of Defender, Sentinel, Zero Trust and cloud security architecture.
• Strong understanding of hybrid infrastructure, resilience, backup and disaster recovery.
• Extensive experience designing and assuring cloud, security and hybrid architectures in complex enterprise environments, ideally in a senior architecture role.
• Experience with architecture governance, design assurance, reference architectures and technical standards.
• Experience supporting cloud migration, modernisation and transformation, ideally in a regulated environment.
• Experience with Infrastructure as Code, including Terraform and Azure DevOps.
• Strong communication, influencing and stakeholder-management skills.

Qualifications

• Microsoft Certified: Azure Solutions Architect Expert, or equivalent.
• TOGAF or equivalent architecture framework knowledge.
• Microsoft Azure Security Engineer, CCNP or HashiCorp Terraform Associate certification.
• Experience with FinOps and cloud cost optimisation.
• Knowledge of AI governance and responsible AI.

Additional Information

Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.

HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.

We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.

HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.