Cloud Security Architect Manager — Azure, AWS & Zero Trust

Eames Consulting; Ipswich; On-site; GBP 80,000 - 90,000; Full time

Job summary

Eames Consulting is recruiting a hands-on Cloud Security Architect at manager level for an on-premise to cloud migration journey. You will define the cloud security architecture across Azure and AWS, lead a small team, and embed DevSecOps practices from design through delivery.

The role focuses on identity, privileged access and Zero Trust, reporting to the Head of Architecture and Security. Based in Ipswich or Caerphilly, the position is permanent with on-site requirements.

Qualifications

• Substantial, current hands-on experience in cloud architecture, engineering or security.
• Track record of delivering on-premise to cloud migrations end to end.
• Deep Azure security expertise (landing zones, networking, Azure Policy, RBAC, Key Vault, Defender for Cloud, Sentinel) and strong working knowledge of AWS.
• Strong Entra ID and hybrid identity knowledge, including Conditional Access, SAML/OIDC federation and migrating Group Policy to Intune.
• Practical privileged access and Zero Trust design experience.
• Hands-on DevSecOps skills: Terraform, Bicep or CloudFormation, PowerShell or Python, Azure DevOps or GitHub Actions, and Kubernetes/AKS.
• Working knowledge of ISO 27001, UK GDPR and the security requirements of a regulated UK environment.
• Experience leading small technical teams and mentoring junior engineers.
• Excellent communication skills and a commercially aware, pragmatic approach.

Responsibilities

• Lead assessment of current estate (on-prem data centre, VDI, AD, M365, Azure and AWS) to set a baseline for change.
• Define and own the future-state cloud security architecture and migration roadmap.
• Build secure Azure landing zones and AWS patterns with Zero Trust network design.
• Lead identity and device modernisation from AD and GPO to Entra ID and Intune.
• Define and implement privileged access controls, including Entra PIM and PAM tooling.
• Set cloud security standards aligned to NCSC principles, CIS Benchmarks and Microsoft benchmarks.
• Embed DevSecOps through IaC, secure pipelines, secrets management and policy-as-code.
• Lead threat modelling, track pen test findings to remediation, design tested DR.
• Present options, risks, costings and business cases at governance forums.
• Provide technical assurance over vendor and partner proposals.

Skills

Cloud architecture

Security engineering

Leadership

Communication

DevSecOps

Tools

Terraform

Bicep

CloudFormation

PowerShell

Python

Azure DevOps

GitHub Actions

Kubernetes/AKS

Entra ID

Intune

Job description

Eames Consulting is recruiting a hands-on Cloud Security Architect at manager level for an on-premise to cloud migration journey. You will define the cloud security architecture across Azure and AWS, lead a small team, and embed DevSecOps practices from design through delivery.

The role focuses on identity, privileged access and Zero Trust, reporting to the Head of Architecture and Security. Based in Ipswich or Caerphilly, the position is permanent with on-site requirements.