Cloud Security Architect & Engineering Lead (UK)

PCI Pal; Greater London; On-site; GBP 120,000 - 160,000; Full time

Benefits offered by this job

25 days holiday

Medical, dental and optical insurance

Work from anywhere policy

Electric Vehicle Scheme

Training and development opportunities

Team events and wellbeing hub

Job summary

PCI Pal is seeking an Information Security Architecture & Engineering Lead (UK-based) to own cloud security architecture, DevSecOps, secure SDLC practice, security automation and tooling, and security architecture strategy for the organisation, replacing reactive, post-deployment triage with design-stage security input across Engineering, Product and Pre-Sales.

You will own architecture review for AWS and related controls, drive threat modelling, and provide technical oversight to

Qualifications

• Extensive experience in cloud security architecture across AWS (essential) and Azure.
• Hands-on DevSecOps with CI/CD security and IaC scanning.
• Strong software development in Python and C#/.NET; scripting in PowerShell/Bash.
• Experience threat-modelling cloud workloads at design stage.
• Knowledge of PCI DSS v4.0.1 and ISO/IEC 27001:2022; familiarity with ISO/IEC 42001:2023.
• Leadership of offshore or distributed engineering teams with runbook design.

Responsibilities

• Own architecture review and sign-off for all new AWS production changes.
• Provide technical leadership in security across Engineering, Product and Pre-Sales.
• Develop and maintain security automation, tooling and validation.
• Lead threat-modelling cycles for major product changes and guardrails.
• Governance: contribute to risk registers and SoA; report to CISO.
• Support AI/LLM security testing and vendor control claims validation.

Skills

Cloud security architecture

AWS

Azure

IAM design

Network segmentation

Secrets management

CI/CD security

Infrastructure as Code

Python

C# / .NET

PowerShell

Bash

APIs

Threat modelling

PCI DSS

ISO 27001

KMS management

Tools

SAST tooling

Cloud tooling

Job description

PCI Pal is seeking an Information Security Architecture & Engineering Lead (UK-based) to own cloud security architecture, DevSecOps, secure SDLC practice, security automation and tooling, and security architecture strategy for the organisation, replacing reactive, post-deployment triage with design-stage security input across Engineering, Product and Pre-Sales.

You will own architecture review for AWS and related controls, drive threat modelling, and provide technical oversight to