Senior AWS Cloud Architect, SC Cleared, Remote

SR2 | Socially Responsible Recruitment | Certified B Corporation; West of England; On-site; GBP 101,000 - 111,000; Full time

Job summary

SR2 is seeking an experienced SC Cleared AWS Cloud Architect to lead security-focused cloud architecture for a major public-sector programme. This contract role is remote-first with optional onsite in London and Inside IR35.

You will define high-level designs, oversee Terraform-based deployments, and strengthen identity security with Entra ID, Keycloak, and threat monitoring across AWS. Strong collaboration with engineering, security and OPS teams is essential.

Qualifications

• Strong AWS cloud and security architecture experience.
• Experience designing secure, resilient enterprise cloud platforms.
• Excellent knowledge of identity and access management, including Microsoft Entra ID.
• Experience with privileged identity management, conditional access and access-control policies.
• Strong Infrastructure as Code experience, particularly Terraform.
• Knowledge of DevSecOps practices and security automation within CI/CD pipelines.
• Experience designing cloud logging, monitoring and threat-detection capabilities.
• Ability to create architecture designs and communicate technical decisions clearly.
• Strong stakeholder-management and technical-assurance experience.
• SC (essential) & NPPV3 Clearance (desirable)

Responsibilities

• Provide technical and infrastructure architecture oversight across an AWS-hosted platform.
• Translate business needs into traceable technical and security requirements.
• Produce high-level designs, architecture decisions and supporting technical documentation.
• Review solution designs, supplier proposals and technical notes.
• Lead the resolution of architecture, integration and platform-level issues.
• Identify technical risks, security weaknesses and areas of technical debt.
• Design secure integration between Microsoft Entra ID and AWS.
• Develop conditional-access, privileged-access and approval policies.
• Improve the resilience and availability of identity services, including Keycloak and OTP solutions.
• Embed automated security controls into Terraform and CI/CD pipelines.
• Design security monitoring using services such as AWS Security Lake, CloudWatch and Microsoft Defender for Cloud.
• Support threat detection through centralised logging, tailored alerts and anomaly monitoring.
• Share knowledge and provide technical guidance to engineering teams.

Skills

AWS cloud architecture

Security architecture

Identity and access management

Terraform

CI/CD security

Threat monitoring

Entra ID knowledge

Tools

Terraform

CloudWatch

Defender for Cloud

AWS Security Lake

Job description

SR2 is seeking an experienced SC Cleared AWS Cloud Architect to lead security-focused cloud architecture for a major public-sector programme. This contract role is remote-first with optional onsite in London and Inside IR35.

You will define high-level designs, oversee Terraform-based deployments, and strengthen identity security with Entra ID, Keycloak, and threat monitoring across AWS. Strong collaboration with engineering, security and OPS teams is essential.