Cloud Architect

SR2 | Socially Responsible Recruitment | Certified B Corporation; Greater London; Remote; GBP 101,000 - 111,000; Full time

Job summary

SR2 is seeking an experienced AWS Cloud Architect to support a secure cloud-hosting platform used across a major public-sector programme. This senior, hands-on role covers cloud integration, identity security, DevSecOps, threat monitoring and technical assurance.

You will provide architecture leadership across the AWS platform, translating business needs into technical and security requirements, and producing architecture artefacts.

Qualifications

• Strong AWS cloud and security architecture experience.
• Experience designing secure, resilient enterprise cloud platforms.
• Excellent knowledge of identity and access management, including Microsoft Entra ID.
• Experience with privileged identity management, conditional access and access-control policies.
• Strong Infrastructure as Code experience, particularly Terraform.
• Knowledge of DevSecOps practices and security automation within CI/CD pipelines.
• Experience designing cloud logging, monitoring and threat-detection capabilities.
• Ability to create architecture designs and communicate technical decisions clearly.
• Strong stakeholder-management and technical-assurance experience.
• SC (essential) & NPPV3 Clearance (desirable)

Responsibilities

• Provide architecture leadership across the AWS platform, helping onboard new applications and ensuring security, integration and operational requirements are reflected within the technical design.
• Work closely with engineering, infrastructure and security teams, producing architecture artefacts, resolving complex design issues and identifying opportunities to improve platform resilience and security.
• Provide technical and infrastructure architecture oversight across an AWS-hosted platform.
• Translate business needs into traceable technical and security requirements.
• Produce high-level designs, architecture decisions and supporting technical documentation.
• Review solution designs, supplier proposals and technical notes.
• Lead the resolution of architecture, integration and platform-level issues.
• Identify technical risks, security weaknesses and areas of technical debt.
• Design secure integration between Microsoft Entra ID and AWS.
• Develop conditional-access, privileged-access and approval policies.
• Improve the resilience and availability of identity services, including Keycloak and OTP solutions.
• Embed automated security controls into Terraform and CI/CD pipelines.
• Design security monitoring using services such as AWS Security Lake, CloudWatch and Microsoft Defender for Cloud.
• Support threat detection through centralised logging, tailored alerts and anomaly monitoring.
• Share knowledge and provide technical guidance to engineering teams.

Skills

AWS cloud architecture

Security architecture

IAM / identity management

DevSecOps

CI/CD security

Threat detection

Architecture design

Stakeholder management

Terraform

Tools

Keycloak

Job description

SC Cleared AWS Cloud Architect

• Contract role
• 6 months (multiple extensions likely)
• Remote first (adhoc onsite in London)
• Inside IR35
• £550-£600

We are looking for an experienced AWS Cloud Architect to support the continued development of a secure cloud-hosting platform used across a major public-sector programme. This is a senior, hands-on architecture role covering cloud integration, identity security, DevSecOps, threat monitoring and technical assurance.

The Role

You will provide architecture leadership across the AWS platform, helping onboard new applications and ensuring that security, integration and operational requirements are reflected within the technical design. You will work closely with engineering, infrastructure and security teams, producing architecture artefacts, resolving complex design issues and identifying opportunities to improve platform resilience and security.

Key Responsibilities

• Provide technical and infrastructure architecture oversight across an AWS-hosted platform.
• Translate business needs into traceable technical and security requirements.
• Produce high-level designs, architecture decisions and supporting technical documentation.
• Review solution designs, supplier proposals and technical notes.
• Lead the resolution of architecture, integration and platform-level issues.
• Identify technical risks, security weaknesses and areas of technical debt.
• Design secure integration between Microsoft Entra ID and AWS.
• Develop conditional-access, privileged-access and approval policies.
• Improve the resilience and availability of identity services, including Keycloak and OTP solutions.
• Embed automated security controls into Terraform and CI/CD pipelines.
• Design security monitoring using services such as AWS Security Lake, CloudWatch and Microsoft Defender for Cloud.
• Support threat detection through centralised logging, tailored alerts and anomaly monitoring.
• Share knowledge and provide technical guidance to engineering teams.

Requirements:

• Strong AWS cloud and security architecture experience.
• Experience designing secure, resilient enterprise cloud platforms.
• Excellent knowledge of identity and access management, including Microsoft Entra ID.
• Experience with privileged identity management, conditional access and access-control policies.
• Strong Infrastructure as Code experience, particularly Terraform.
• Knowledge of DevSecOps practices and security automation within CI/CD pipelines.
• Experience designing cloud logging, monitoring and threat-detection capabilities.
• Ability to create architecture designs and communicate technical decisions clearly.
• Strong stakeholder-management and technical-assurance experience.
• SC (essential) & NPPV3 Clearance (desirable)