Senior AWS Cloud Architect - Secure, Remote (SC)

SR2 | Socially Responsible Recruitment | Certified B Corporation; Belfast City District; On-site; GBP 101,000 - 111,000; Full time

Job summary

SC Cleared AWS Cloud Architect is sought for a contract role with remote-first arrangement and occasional onsite in London. The candidate will lead architecture across an AWS platform, focusing on security, identity, DevSecOps and threat monitoring for a major public-sector programme.

You will translate business needs into technical requirements, produce high-level designs, review designs, and guide engineering teams on secure, resilient cloud solutions with Entra ID integration and

Qualifications

• Strong AWS cloud and security architecture experience.
• Experience designing secure, resilient enterprise cloud platforms.
• Excellent knowledge of identity and access management, including Microsoft Entra ID.
• Experience with privileged identity management, conditional access and access-control policies.
• Strong Infrastructure as Code experience, particularly Terraform.
• Knowledge of DevSecOps practices and security automation within CI/CD pipelines.
• Experience designing cloud logging, monitoring and threat-detection capabilities.
• Ability to create architecture designs and communicate technical decisions clearly.
• Strong stakeholder-management and technical-assurance experience.
• SC (essential) & NPPV3 Clearance (desirable)

Responsibilities

• Provide technical and infrastructure architecture oversight across an AWS-hosted platform.
• Translate business needs into traceable technical and security requirements.
• Produce high-level designs, architecture decisions and supporting technical documentation.
• Review solution designs, supplier proposals and technical notes.
• Lead the resolution of architecture, integration and platform-level issues.
• Identify technical risks, security weaknesses and areas of technical debt.
• Design secure integration between Microsoft Entra ID and AWS.
• Develop conditional-access, privileged-access and approval policies.
• Improve the resilience and availability of identity services, including Keycloak and OTP solutions.
• Embed automated security controls into Terraform and CI/CD pipelines.
• Design security monitoring using services such as AWS Security Lake, CloudWatch and Microsoft Defender for Cloud.
• Support threat detection through centralised logging, tailored alerts and anomaly monitoring.
• Share knowledge and provide technical guidance to engineering teams.

Skills

AWS

Security architecture

Terraform

DevSecOps

IAM

CI/CD security

Threat monitoring

Architecture leadership

Tools

Terraform

Job description

SC Cleared AWS Cloud Architect is sought for a contract role with remote-first arrangement and occasional onsite in London. The candidate will lead architecture across an AWS platform, focusing on security, identity, DevSecOps and threat monitoring for a major public-sector programme.

You will translate business needs into technical requirements, produce high-level designs, review designs, and guide engineering teams on secure, resilient cloud solutions with Entra ID integration and