IT Security Solution Architect Director

ZipRecruiter; London; On-site; GBP 60,000 - 100,000; Full time

Job summary

Join a forward-thinking company that is at the forefront of cloud security. This role focuses on enhancing security measures through effective secrets management across multi-cloud environments. You will be instrumental in influencing engineering decisions, defining security requirements, and mentoring team members to foster a strong security culture. With a collaborative approach and a commitment to excellence, you will help shape the future of security practices while ensuring compliance with industry standards. If you have a passion for technology and a drive to innovate, this opportunity is perfect for you.

Qualifications

• 3+ years of experience in secrets management with global implementations.
• Ability to drive adoption of best practices using HashiCorp Vault.

Responsibilities

• Design and implement cloud security enhancements for secrets management.
• Collaborate with teams to protect enterprise information and drive secure outcomes.

Skills

Secrets Management

Cloud Security

Stakeholder Management

Risk Assessment

Python

Terraform

GitHub

Agile Methodologies

Education

Bachelor's Degree

Tools

HashiCorp Vault

Azure Key Vault

Google Secrets Manager

AWS Secrets Manager

Jira

Miro

ServiceNow

Job description

Job Description

*Locations*: Atlanta | London

Who We Are

Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation— inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities.

Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures—and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive.

What You'll Do

This role focuses on designing, implementing, and tracking cloud security enhancements with a specialization in Secrets Management across multi-cloud and SaaS environments.

You will influence engineering decisions to drive secure and successful business outcomes while collaborating with internal teams to protect enterprise information. Key responsibilities include defining and implementing access and security requirements; planning, testing, and supporting secure systems; and serving as a Subject Matter Expert on IT projects. Additionally, you will develop and maintain security standards, policies, and procedures, while mentoring team members to foster a strong security culture.

This position requires a strategic and hands-on approach to strengthen BCG’s cloud security posture.

You're Good At

• Interacting with stakeholders and possessing the ability to influence direction, articulate risks, and advocate for solutions and roadmaps.
• Managing backlog and roadmap of secrets management items to be completed.
• Managing end-to-end delivery of projects with hands-on involvement in the development and configuration of products around secrets management and machine authentication.
• Determining requirements by evaluating business strategies and requirements, implementing information security standards, conducting system and vulnerability analyses and risk assessments, recommending secure architecture aligned to business architecture, and identifying/driving remediation of integration issues.
• Providing expert knowledge of solution/application architecture for related capabilities as well as methodologies in the software development life cycle.
• Maintaining security data and principles by ensuring compliance to standards, policies, regulatory requirements, and good industry practices.
• Self-managing progress and status of tasks and deliverables on projects and escalating issues and risks timely.
• Completing market assessments on vendor products, packages, and services; guiding tests and implementation of products solving enterprise information security requirements.
• S suggesting and implementing alternative mitigations/compensating controls to allow for business to continue while protecting BCG's assets.
• Partnering with cross-functional teams to ensure compliance to industry and company standards including ISO 27001, SOC2, NIST, GDPR, and DPO standards.
• Updating job knowledge by tracking and understanding emerging practices and standards; participating in educational opportunities; reading professional publications; maintaining personal networks; participating in professional organizations.
• Vendor escalations and Major Incident Management support for business-critical services.
• Providing L3 operational support for Secrets Management tooling and oversight of L1/L2 operations issues.
• Creating and tracking health, security, and adoption metrics.

What You'll Bring

Must Haves

• Ability to drive adoption of secrets management best practices, primarily using HashiCorp Vault.
• 3+ years’ experience of secrets management through large-scale implementations distributed globally.
• Experience managing cloud secrets management solutions such as Azure Key Vault, Google Secrets Manager, and AWS Secrets Manager.
• Experience with Cloud Security Posture Management (CSPM) across AWS, Azure, and GCP.
• Tier 3 support experience for service outage and mission-critical application support.
• Experience with app registrations and service principals in Azure AD.
• Experience documenting complex architectures.
• Experience with GitHub (or similar tools), CI/CD pipelines.
• Knowledge and experience with automating solutions using languages like Python, PowerShell, Terraform, or similar.

Nice to Haves

• Bachelor’s degree (or equivalent related experience).
• 7+ years’ experience working with AWS, GCP, Azure, or Alibaba cloud.
• Understanding of API concepts, RESTful services, cloud security, zero trust, risk-based authentication, and MFA solutions.
• Hands-on experience integrating web and single-page applications through API endpoints.
• Related certifications (e.g., Security Plus, CISSP, CCSP, ITIL Foundations, CE+).
• Experience working in Agile environments with tools like Jira, Miro, and ServiceNow.

Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender/expression, disability, veteran status, or any other characteristic protected under law.

BCG is an E-Verify Employer. More information on E-Verify.