Cloud Security Architect & Engineer

La Fosse Associates; Cambridge; On-site; GBP 111,000 - 118,000; Full time

Job summary

La Fosse Associates is seeking a Security Architect/Engineer to join a greenfield, on‑premise Private Cloud Platform in the UK. You will shape security foundations from day one and work closely with architects and engineers to embed security into the platform.

Lead threat modelling across the platform, translating attack paths into practical security requirements and controls for engineering teams to implement.

Qualifications

• Experience with private/hybrid cloud security
• Hands-on security implementation and reviews

Responsibilities

• Work on a greenfield, on-premise Private Cloud Platform, helping shape the security foundations from day one and working closely with architects and engineers to build security into the platform.
• Lead threat modelling across the platform, identifying realistic attack paths and turning them into practical security requirements, controls and actions that engineering teams can implement.
• Bring strong infrastructure security experience across private/hybrid cloud, virtualisation, containers, networking, IAM/PAM, PKI, segmentation and hardening, with a hands‑on approach to reviewing designs, configurations and technical implementations.
• Build security into the engineering lifecycle through IaC, CI/CD, policy‑as‑code and automation, with a focus on automated control testing, continuous validation and generating clear, auditable security evidence.
• Work as the security partner to Engineering, defining reusable security patterns and production‑readiness standards, applying frameworks such as NIST and STIGs pragmatically and driving security findings through to resolution.

Job description

La Fosse Associates is seeking a Security Architect/Engineer to join a greenfield, on‑premise Private Cloud Platform in the UK. You will shape security foundations from day one and work closely with architects and engineers to embed security into the platform.

Lead threat modelling across the platform, translating attack paths into practical security requirements and controls for engineering teams to implement.