Remote Senior Security Architect – Cloud & Hybrid

NMI; Bristol; Hybrid; CAD 175,000 - 195,000; Full time

Benefits offered by this job

Competitive salary + bonus

A remote first culture!

Flex PTO

Health, Dental and Vision Insurance

13 Paid Holidays

Company volunteer days

Job summary

NMI seeks a Senior Staff Information Security Engineer to shape security across a hybrid estate spanning AWS and on‑premises colocation facilities. You will lead security architecture, implement scalable controls, and partner with Engineering, Product, SRE, and Infrastructure to reduce risk while enabling delivery.

You will stay hands‑on while guiding complex security decisions, leading cross‑team initiatives, and elevating secure‑by‑design practices with reusable patterns and tooling.

Qualifications

• Significant experience in security engineering, infrastructure security, cloud security, security architecture, or platform engineering.
• Deep, hands‑on experience securing AWS environments.
• Strong knowledge of AWS identity and access management, network architecture, account governance, encryption, logging, monitoring, secrets management, and workload protection.
• Experience designing or securing on‑premises, data‑centre, or colocation‑hosted infrastructure.
• Strong knowledge of enterprise networking, segmentation, firewalls, secure remote access, privileged administration, and hybrid connectivity.
• Experience with infrastructure‑as‑code, CI/CD security, containerised environments, and cloud‑native platforms.
• Demonstrated experience designing and implementing automated security controls and engineering solutions.
• Proficiency with scripting or software development using Python, Go, or a comparable language.
• Practical experience using AI‑assisted tooling to improve security engineering and operational workflows.
• Experience leading complex initiatives across multiple engineering, infrastructure, or product teams.
• Strong knowledge of security architecture, threat modelling, vulnerability management, detection, and incident response.

Responsibilities

• Define and evolve security architecture across AWS and our colocation estate.
• Establish secure reference architectures, engineering standards, and reusable control patterns.
• Provide technical leadership for major infrastructure, platform, and product initiatives.
• Identify systemic risks and lead practical, sustainable programmes to address them.
• Engage early in the design of new products, platforms, services, and integrations.
• Lead threat modelling, security architecture reviews, and technical risk assessments.
• Translate security risks into clear, practical engineering recommendations.
• Help teams adopt secure‑by‑design principles through reusable patterns, tooling, and documentation.
• Design and implement security tooling, integrations, and automated controls.
• Embed security capabilities into infrastructure provisioning, engineering workflows, and CI/CD pipelines.
• Use AI-assisted tooling to improve scripting, detection development, alert analysis, vulnerability triage, threat modelling, and technical documentation.
• Validate AI-generated outputs and ensure AI tools are used with appropriate controls for confidentiality, accuracy, access, and human oversight.
• Provide technical direction for vulnerability and exposure management across AWS and on‑premises infrastructure.
• Identify recurring patterns across incidents, penetration tests, vulnerabilities, and control assessments.
• Act as a senior technical escalation point during significant security incidents.
• Ensure investigations and lessons learned result in durable architectural and engineering improvements.
• Lead complex security initiatives spanning multiple teams and planning cycles.
• Mentor security engineers and provide guidance to engineers in adjacent teams.
• Raise the standard of security architecture, automation, documentation, and technical decision‑making.
• Communicate security risks and recommendations clearly to technical teams, product leaders, and senior stakeholders.

Skills

Security engineering

Cloud security

Security architecture

AWS security

Threat modelling

Platform engineering

Scripting (Python/Go)

CI/CD security

Automation & IaC

AI-assisted tooling

Tools

Kubernetes

CNAPP

CSPM

SIEM

EDR

WAF

Terraform

Policy-as-code

Job description

NMI seeks a Senior Staff Information Security Engineer to shape security across a hybrid estate spanning AWS and on‑premises colocation facilities. You will lead security architecture, implement scalable controls, and partner with Engineering, Product, SRE, and Infrastructure to reduce risk while enabling delivery.

You will stay hands‑on while guiding complex security decisions, leading cross‑team initiatives, and elevating secure‑by‑design practices with reusable patterns and tooling.