Principal Cloud Security Architect (AWS/GCP)

On the Beach; Manchester; Remote; GBP 90,000 - 120,000; Full time

Benefits offered by this job

25 days holiday

Learnerbly learning platform

Enhanced parental leave

Cycle to Work scheme

Gym discount

Share Incentive Plan

Job summary

On the Beach is seeking a hands-on Security Architect to secure the systems behind our travel platform. You’ll own security design across AWS and GCP, lead threat modelling, and work with engineering to implement practical fixes and secure configurations.

You’ll report to the Head of Architecture and collaborate with Architects, Principal Engineers and security leadership to tie technical decisions to business risk.

Qualifications

• Strong practical experience securing AWS or GCP environments, including access controls, networking and account/project structure.
• Hands-on engineering using code/configuration to understand how systems work; review code and implement security changes.

Responsibilities

• Lead security design decisions and provide clear recommendations to engineering teams.
• Translate business needs into secure design and prioritised work.
• Improve cloud and identity security across AWS and GCP with a focus on access controls and logging.
• Develop reusable security designs and automated checks with DevEx teams.
• Lead threat modelling and communicate risks to stakeholders.
• Protect sensitive data with appropriate controls for access, encryption, retention and deletion.
• Support detection and incident response with logging capabilities and incident learnings.
• Advise on security architecture for employee access, devices and corporate systems.

Skills

Cloud & containers

Hands-on engineering

Security architecture

Identity & API security

DevSecOps tooling

Tools

Terraform

Kubernetes

Job description

On the Beach is seeking a hands-on Security Architect to secure the systems behind our travel platform. You’ll own security design across AWS and GCP, lead threat modelling, and work with engineering to implement practical fixes and secure configurations.

You’ll report to the Head of Architecture and collaborate with Architects, Principal Engineers and security leadership to tie technical decisions to business risk.