Cloud Security Architect

Lloyds Bank plc; Greater Manchester; Hybrid; GBP 73,000 - 81,000; Full time

Benefits offered by this job

pension up to 15%

annual bonus

share schemes

discounted shopping

30 days holiday

wellbeing & parental leave

Job summary

Lloyds Banking Group is hiring a Cloud Security Architect to design and implement secure multi-cloud architectures, balancing risk, resilience and scale. You will drive guardrails, reference patterns and secure-by-design principles across Azure, GCP and hybrid environments.

You will partner with engineering and product teams to embed security early, review proposals for gaps, and ensure ongoing governance and threat mitigation in line with regulatory standards.

Qualifications

• Governance, risk and compliance decisions aligned to standards.
• Threat modelling and risk assessment for cloud services.
• Broad cloud security expertise across Azure/GCP and hybrid environments.
• AI/ML security controls for secure deployment.
• Secure software development and application security in CI/CD.
• Data security: key, certificate and secret management.
• IAM: secure access at scale.
• Infrastructure security including Kubernetes and IaC.
• Network security: Zero Trust and segmentation.
• Security logging and monitoring with SIEM integration.

Responsibilities

• Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.
• Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls via security guardrails.
• Partner with engineering and product teams to embed security guardrails early in design, ensuring compliance and resilience.
• Review external architecture proposals and identify security gaps.
• Document and uphold secure-by-design principles and architecture governance.
• Collaborate with senior partners to articulate security risks and mitigations.
• Anticipate customer needs taking proactive steps to address them.

Skills

Governance & Compliance

Threat Modelling

Cloud Security Architecture

AI/ML Security

Application Security

Data Security

Identity & Access Management

Infrastructure Security

Network Security

Security Logging & Monitoring

Education

CISSP

CCSP

Azure Security Engineer Associate

Google Professional Cloud Security Engineer

Microsoft Certified: Azure Solutions Architect Expert

Google Professional Cloud Architect

Tools

Terraform

ARM Templates

Kubernetes (AKS/GKE)

Azure

GCP

SIEM

Job description

End Date

Tuesday 27 October 2026

Salary Range

£72,702 - £80,780

We support flexible working - click here for more information on flexible working options

Flexible Working Options

Hybrid Working, Job Share

Job Description Summary

Are you a forward-thinking Cloud Security Architect ready to make an impact? Do you want to develop secure multi-cloud architectures that accelerate delivery? If you thrive making risk-based decisions, standardising reference patterns, and turning sophisticated threats into clear guardrails - this is your opportunity!

Job Description

JOB TITLE: Cloud Security Architect

SALARY: £72,702-£88,858 (Manchester) £84,051-£93,390 (London)

LOCATION: Manchester, London

HOURS: Full-time

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites

About this opportunity

At Lloyds Banking Group, our purpose is simple: Help Britain Prosper. As we transform into the UK's leading FinTech, we're modernising our technology and security capabilities to protect our customers and enable innovation at scale.

The Cloud Enterprise & Compute Security Lab is at the forefront of this transformation driving secure-by-design principles across multi-cloud environments. We're looking for a Cloud Security Architect to shape the future of cloud security architecture and deliver secure, resilient, and scalable solutions.

What you'll be doing:

• Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.
• Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.
• Partner with engineering and product teams to embed security guardrails early in design, ensuring compliance and resilience.
• Review external architecture proposals and identify security gaps.
• Document and uphold secure-by-design principles and architecture governance.
• Collaborate with senior partners to articulate security risks and mitigations.
• Anticipate customer needs taking proactive steps to address them.

Why join us?

We're transforming at pace. Investing billions in our people, data and tech to change the way we meet the needs of our 28 million customers. We're growing, and we'd love you to be part of the journey.

We're looking for someone with strong technical expertise and a passion for security! Here's what we need:

• Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards.
• Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems.
• Cloud Security Expertise: broad knowledge across the following Security Domains and their capabilities within Azure/GCP and SME experience in at least one area. Familiarity in AWS is also desirable.
• AI/ML security: Knowledge of AI/ML threats and risks, with experience applying security controls for secure deployment of AI services in cloud platforms.
• Application Security: CI/CD Security including secure software supply chain.
• Data Security: Key, certificate and secrets Management.
• Identity and Access Management: Securing user/non-user access at scale.
• Infrastructure Security: Kubernetes (AKS/GKE/Istio), API Security, IaC security (e.g. Terraform, ARM templates).
• Network Security: Zero Trust, firewalls, segmentation, DDoS Protection.
• Security Logging and Monitoring: Security logging, SIEM integration, event correlation.

And any of these would be great:

• CISSP, CCSP, or equivalent certifications.
• Azure Security Engineer Associate, Google Professional Cloud Security Engineer.
• Microsoft Certified: Azure Solutions Architect Expert, Google Professional Cloud Architect.

We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply.

This is a place for you

We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. And, as a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role with a disability, long-term health or neurodivergent condition through the Disability Confident Scheme.

We also offer a wide-ranging benefits package, which includes:

• A generous pension contribution of up to 15%
• An annual performance-related bonus
• Share schemes including free shares
• Benefits you can adapt to your lifestyle, such as discounted shopping
• 30 days' holiday, with bank holidays on top
• A range of wellbeing initiatives and generous parental leave policies

Like what you hear? Join us!

At Lloyds Banking Group, we're driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you'll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you'll have many opportunities to learn, grow and develop.

We keep your data safe. So, we'll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We'll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person.

We're focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we're building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.