Cloud Security Architect

Lloyds; Manchester; Hybrid; GBP 80,000 - 120,000; Full time

Benefits offered by this job

22 days holiday

Flexible working

Family leave

Flex cash

Health insurance

Colleague Offers

Financial products

Share plans

Pension

Job summary

Lloyds Banking Group is seeking a Cloud Security Architect to shape the future of cloud security architecture and deliver secure, resilient, and scalable solutions. You will develop and enforce reference architectures, patterns and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.

You will conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls to maintain secure posture.

Qualifications

• Experience designing secure cloud architectures across multi-cloud environments.
• Ability to conduct threat modelling and implement guardrails.
• Proven track record embedding security in early design phases.

Responsibilities

• Develop and enforce reference architectures, patterns and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.
• Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls.
• Partner with engineering and product teams to embed security guardrails in design and ensure resilience.

Skills

Threat modelling

Security assessments

Security guardrails

Cloud security architecture

Security governance

Education

Cloud security certifications

CISSP / CCSP or equivalent

Tools

Azure

GCP

Kubernetes

Terraform

ARM templates

Job description

• At Lloyds Banking Group, our purpose is simple: Help Britain Prosper. As we transform into the UK’s leading FinTech, we’re modernising our technology and security capabilities to protect our customers and enable innovation at scale
• The Cloud Enterprise & Compute Security Lab is at the forefront of this transformation driving secure-by-design principles across multi-cloud environments. We’re looking for a Cloud Security Architect to shape the future of cloud security architecture and deliver secure, resilient, and scalable solutions
• Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments
• Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift
• Partner with engineering and product teams to embed security guardrails early in design, ensuring compliance and resilience
• Review external architecture proposals and identify security gaps
• Document and uphold secure-by-design principles and architecture governance
• Collaborate with senior partners to articulate security risks and mitigations
• Anticipate customer needs taking proactive steps to address them

Benefits

• A generous holiday allowance: You’ll be eligible for a minimum of 22 days holiday (excluding bank holidays), rising to 30 days based on length of service and grade.
• A flexible way of working: Whether you want flexibility over your location or when you log on, together we can create an approach that works for you and for the business.
• Family leave: Up to 63 weeks of maternity or adoption leave. Statutory maternity or adoption pay is available for 39 weeks, and 20 weeks will be enhanced to the equivalent of full pay. Partners can have six weeks of fully paid paternity leave.
• Flex cash: This is 4% of your basic salary and can be used to spend on the benefits of your choice, or you can choose to take it as a cash top up in your monthly salary.
• Health insurance: Our company funded Private Medical Benefit provides all colleagues with access to good quality medical care, including accommodation, nursing care and specialist advice.
• Colleague Offers: Get discounts on everything from electrical items to cinema tickets and weekly food shopping. You can share this benefit with up to ten family members or friends.
• Financial products: Take advantage of our great financial products, some at a discounted rate, including current accounts, home and car insurance and loans.
• Share plans: Participate in Sharematch and receive matching shares of up to £45 a month from the company, and you can choose to participate in Sharesave, our combined savings and share option plan.
• Pension: We offer a generous pension plan, with all joiners being automatically enrolled in our ‘Your Tomorrow’ scheme. You can decide how much you save and get a say in where your contributions are invested.

• Data Security: Key, certificate and secrets Management
• Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems
• Identity and Access Management: Securing user/non-user access at scale
• Cloud Security Expertise: broad knowledge across the following Security Domains and their capabilities within Azure/GCP and SME experience in at least one area. Familiarity in AWS is also desirable
• Network Security: Zero Trust, firewalls, segmentation, DDoS Protection
• Application Security: CI/CD Security including secure software supply chain
• Infrastructure Security: Kubernetes (AKS/GKE/Istio), API Security, IaC security (e.g. Terraform, ARM templates)
• Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards
• AI/ML security: Knowledge of AI/ML threats and risks, with experience applying security controls for secure deployment of AI services in cloud platforms
• Security Logging and Monitoring: Security logging, SIEM integration, event correlation

• CISSP, CCSP, or equivalent certifications
• Microsoft Certified: Azure Solutions Architect Expert, Google Professional Cloud Architect
• Azure Security Engineer Associate, Google Professional Cloud Security Engineer