Cloud Security Architect: AWS & Azure, Zero Trust Leader

XpertDirect; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

XpertDirect is seeking an experienced Cloud Security Architect to define and evolve security architecture across AWS and Azure, based in London.

You’ll own cloud security standards, IAM, Zero Trust, Kubernetes security, and Terraform/IaC controls, partnering with Platform, DevOps, Security, and Software Engineering teams to translate architecture into practical engineering safeguards.

Qualifications

• 8+ years in Cloud Security, Security Engineering, Cloud Architecture, or related roles.
• Strong architecture ownership across AWS and/or Azure.
• IAM and identity federation expertise.
• Zero Trust architecture knowledge.
• Cloud governance and security controls implementations.
• Strong understanding of modern cloud-native architecture.

Responsibilities

• Define cloud security architecture across AWS and Azure.
• Design secure landing zones and cloud governance frameworks.
• Develop IAM, federation, and least-privilege strategies.
• Establish security standards for Kubernetes and cloud-native workloads.
• Define Zero Trust principles across users, workloads, and infrastructure.
• Embed security controls into Terraform and Infrastructure as Code.
• Review cloud architectures and guide engineering teams on secure design.
• Develop reusable security patterns and technical standards as the platform scales.
• Support cloud risk assessments and architecture decisions across new products and services.

Skills

Cloud Security

Security Engineering

Cloud Architecture

IAM and federation

Zero Trust

Cloud governance

Cloud-native architecture

Education

CISSP or CCSP certification

Tools

Terraform

Job description

XpertDirect is seeking an experienced Cloud Security Architect to define and evolve security architecture across AWS and Azure, based in London.

You’ll own cloud security standards, IAM, Zero Trust, Kubernetes security, and Terraform/IaC controls, partnering with Platform, DevOps, Security, and Software Engineering teams to translate architecture into practical engineering safeguards.