Security Architect

CloudFlare; City of Westminster; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Competitive compensation

Global offices across Americas, Europe

Challenging, collaborative environment

Job summary

CloudFlare is seeking a Senior Security Architect to design and drive the strategic direction of IAM across hybrid environments. You will partner with engineering to embed secure-by-design principles, perform threat modeling and risk assessments, and guide security controls in cloud and on‑prem data centers.

With 8+ years in information security, you will lead architecture discussions, mentor peers, and ensure regulatory alignment for financial services. Strong communication is essential.

Qualifications

• Must have 8+ years in information security with at least 4 years in security architecture.
• Deep IAM expertise with major providers and PAM/IGA platforms.
• Strong understanding of OAuth/OIDC/SAML/SCIM, Kerberos, LDAP.
• Experience building security controls in cloud and on-prem environments.
• Financial services experience and knowledge of relevant regulations.
• Proven ability to lead, mentor, and communicate with stakeholders.

Responsibilities

• Define and own IAM architecture strategy for workforce, customer, and workload identities.
• Design secure solutions using PAM, SSO, MFA, and IGA platforms.
• Architect security controls across AWS, Azure, GCP and on-premises environments.
• Partner with engineering to embed secure-by-design practices in development and CI/CD.
• Perform threat modeling, architecture reviews, and risk assessments.
• Provide technical leadership and mentorship to junior staff.
• Collaborate with GRC, SOC, and IT to align with financial services regulations.
• Evaluate new security technologies and maintain architecture standards.

Skills

8+ years information security

4+ years security architecture

IAM expertise

Okta

Azure AD/Entra ID

Ping Identity

CyberArk

SailPoint

BeyondTrust

OAuth 2.0

OIDC

SAML

SCIM

Kerberos

LDAP

AWS

Azure

GCP

on-premises data centers

financial services

network security

cryptography

zero trust architecture

secrets management

Terraform

CloudFormation

Python

PowerShell

Bash

communication

Education

Bachelor's degree in Computer Science or Information Security

CISSP

CISSP-ISSAP

SABSA

CCSP

cloud security certifications (AWS/Azure)

Tools

Okta

Azure AD/Entra ID

Ping Identity

CyberArk

SailPoint

BeyondTrust

Job description

We are seeking a Senior Security Architect to join our global Information Security team. In this role, you will be responsible for designing and driving the strategic direction of our identity and access management capabilities across cloud and on-premises environments. You will act as a subject matter expert, partnering with engineering, infrastructure, and business teams to embed strong security architecture principles into all aspects of our technology stack.,

• Define and own the security architecture strategy for identity and access management (IAM), including workforce, customer, and workload identities across hybrid environments
• Design and implement secure solutions leveraging identity providers, privileged access management (PAM), single sign-on (SSO), multi-factor authentication (MFA), and identity governance and administration (IGA) platforms
• Architect security controls across cloud environments (AWS, Azure, GCP) and on-premises infrastructure, ensuring consistency and defense-in-depth
• Partner with engineering teams to embed secure-by-design principles into application development, infrastructure automation, and CI/CD pipelines
• Conduct threat modeling, architecture reviews, and risk assessments for new and existing systems
• Provide technical leadership and mentorship to junior members of the security team
• Collaborate with GRC, SOC, and IT teams to ensure alignment with regulatory requirements applicable to financial services (e.g., SEC, FCA, MAS, DORA)
• Evaluate emerging security technologies and provide recommendations to leadership
• Develop and maintain security architecture standards, reference architectures, and design patterns This is a highly visible role that requires deep technical expertise, a strong understanding of the financial services threat landscape, and the ability to translate complex security concepts into practical, scalable solutions., 8+ years of experience in information security, with at least 4 years in a security architecture role
• Deep expertise in identity and access management technologies such as Okta, Azure AD/Entra ID, Ping Identity, CyberArk, SailPoint, BeyondTrust, or similar
• Strong understanding of authentication and authorization protocols (OAuth 2.0, OIDC, SAML, SCIM, Kerberos, LDAP)
• Hands-on experience architecting security controls in public cloud environments (AWS, Azure, and/or GCP) as well as on-premises data centers
• Proven experience working within the financial services industry, with an understanding of the regulatory and threat landscape
• Solid knowledge of network security, cryptography, endpoint security, zero trust architecture, and secrets management
• Experience with infrastructure-as-code (Terraform, CloudFormation) and scripting/automation (Python, PowerShell, Bash)
• Excellent communication skills, with the ability to influence stakeholders at all levels of the organization
• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience), Industry certifications such as CISSP, CISSP-ISSAP, SABSA, CCSP, or cloud‑specific security certifications (AWS Security Specialty, Azure Security Engineer)
• Experience with workload identity, service mesh security, and Kubernetes security
• Familiarity with quantitative trading, low‑latency, or high‑performance computing environments
• Experience contributing to open-source security projects or security research communities

What We Offer

• The opportunity to work alongside talented professionals in a highly collaborative, intellectually stimulating environment
• A culture that values scientific rigor, continuous learning, and thoughtful engineering
• Competitive compensation and benefits package
• Global exposure with offices across the Americas, Europe, and Asia