Cloud Security Architect

XpertDirect; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

XpertDirect is seeking an experienced Cloud Security Architect to define and evolve security architecture across AWS and Azure, based in London.

You’ll own cloud security standards, IAM, Zero Trust, Kubernetes security, and Terraform/IaC controls, partnering with Platform, DevOps, Security, and Software Engineering teams to translate architecture into practical engineering safeguards.

Qualifications

• 8+ years in Cloud Security, Security Engineering, Cloud Architecture, or related roles.
• Strong architecture ownership across AWS and/or Azure.
• IAM and identity federation expertise.
• Zero Trust architecture knowledge.
• Cloud governance and security controls implementations.
• Strong understanding of modern cloud-native architecture.

Responsibilities

• Define cloud security architecture across AWS and Azure.
• Design secure landing zones and cloud governance frameworks.
• Develop IAM, federation, and least-privilege strategies.
• Establish security standards for Kubernetes and cloud-native workloads.
• Define Zero Trust principles across users, workloads, and infrastructure.
• Embed security controls into Terraform and Infrastructure as Code.
• Review cloud architectures and guide engineering teams on secure design.
• Develop reusable security patterns and technical standards as the platform scales.
• Support cloud risk assessments and architecture decisions across new products and services.

Skills

Cloud Security

Security Engineering

Cloud Architecture

IAM and federation

Zero Trust

Cloud governance

Cloud-native architecture

Education

CISSP or CCSP certification

Tools

Terraform

Job description

B2B SaaS | Cloud Security | Security Architecture | Cloud Governance

Our client, a growing B2B SaaS company based in London, is looking for a Cloud Security Architect to define and evolve security architecture across its AWS and Azure environments.

You’ll take ownership of cloud security standards spanning identity, landing zones, infrastructure, Kubernetes, and Zero Trust—working closely with Platform, DevOps, Security, and Software Engineering teams to turn architecture into practical engineering controls.

What You’ll Work On

• Define cloud security architecture across AWS and Azure
• Design secure landing zones and cloud governance frameworks
• Develop IAM, federation, and least-privilege strategies
• Establish security standards for Kubernetes and cloud-native workloads
• Define Zero Trust principles across users, workloads, and infrastructure
• Embed security controls into Terraform and Infrastructure as Code
• Review cloud architectures and guide engineering teams on secure design
• Develop reusable security patterns and technical standards as the platform scales
• Support cloud risk assessments and architecture decisions across new products and services

Core Skills

• 8+ years in Cloud Security, Security Engineering, Cloud Architecture, or related roles
• Strong architecture ownership across AWS and/or Azure
• IAM and identity federation
• Zero Trust architecture
• Cloud governance and security controls
• Strong understanding of modern cloud-native architecture

Nice to Have

• CISSP or CCSP
• AWS Security Specialty / Azure Security certifications
• OPA / policy-as-code
• DevSecOps and CI/CD security
• SOC 2 / ISO 27001
• NIST / CIS frameworks
• Multi-cloud SaaS environments
• Previous experience scaling security architecture within B2B or Enterprise SaaS