SC-Cleared AWS Cloud Architect (Remote)

SR2 | Socially Responsible Recruitment | Certified B Corporation; Park Central; On-site; GBP 101,000 - 111,000; Full time

Job summary

SR2 is seeking an SC-cleared AWS Cloud Architect for a remote-first contract role. The position requires hands-on leadership across AWS, identity security, DevSecOps and threat monitoring for a major public-sector programme. It combines architecture oversight with security engineering in a fast-moving delivery environment.

The role emphasises secure integration, policy design, and documenting architecture decisions, with ad hoc onsite work in London and Inside IR35 conditions.

Qualifications

• Strong AWS cloud and security architecture experience.
• Experience designing secure, resilient enterprise cloud platforms.
• Excellent knowledge of identity and access management, including Microsoft Entra ID.
• Experience with privileged identity management, conditional access and access-control policies.
• Strong Infrastructure as Code experience, particularly Terraform.
• Knowledge of DevSecOps practices and security automation within CI/CD pipelines.
• Experience designing cloud logging, monitoring and threat-detection capabilities.
• Ability to create architecture designs and communicate technical decisions clearly.
• Strong stakeholder-management and technical-assurance experience.
• SC (essential) & NPPV3 Clearance (desirable)

Responsibilities

• Provide technical and infrastructure architecture oversight across an AWS-hosted platform.
• Translate business needs into traceable technical and security requirements.
• Produce high-level designs, architecture decisions and supporting technical documentation.
• Review solution designs, supplier proposals and technical notes.
• Lead the resolution of architecture, integration and platform-level issues.
• Identify technical risks, security weaknesses and areas of technical debt.
• Design secure integration between Microsoft Entra ID and AWS.
• Develop conditional-access, privileged-access and approval policies.
• Improve the resilience and availability of identity services, including Keycloak and OTP solutions.
• Embed automated security controls into Terraform and CI/CD pipelines.
• Design security monitoring using services such as AWS Security Lake, CloudWatch and Microsoft Defender for Cloud.
• Support threat detection through centralised logging, tailored alerts and anomaly monitoring.
• Share knowledge and provide technical guidance to engineering teams.

Skills

AWS architecture

Security architecture

IAM Entra ID

Terraform

DevSecOps

CI/CD security

Threat detection

Stakeholder management

Tools

Keycloak

Job description

SR2 is seeking an SC-cleared AWS Cloud Architect for a remote-first contract role. The position requires hands-on leadership across AWS, identity security, DevSecOps and threat monitoring for a major public-sector programme. It combines architecture oversight with security engineering in a fast-moving delivery environment.

The role emphasises secure integration, policy design, and documenting architecture decisions, with ad hoc onsite work in London and Inside IR35 conditions.