Senior AWS Cloud Architect — Secure, Remote, SC Cleared

SR2 | Socially Responsible Recruitment | Certified B Corporation; Watford; On-site; GBP 101,000 - 111,000; Full time

Job summary

SR2 | Socially Responsible Recruitment | Certified B Corporation is seeking an experienced AWS Cloud Architect to lead secure cloud design for a major public-sector programme. This remote-first contract role requires architecture leadership, threat monitoring, and DevSecOps integration across AWS and Entra ID.

The role covers secure identity integration, policy development, and design documentation, with on-demand onsite support in London. Strong security accreditation will be highly valued.

Qualifications

• Strong AWS cloud and security architecture experience.
• Experience designing secure, resilient enterprise cloud platforms.
• Excellent knowledge of identity and access management, including Microsoft Entra ID.
• Experience with privileged identity management, conditional access and access-control policies.
• Strong Infrastructure as Code experience, particularly Terraform.
• Knowledge of DevSecOps practices and security automation within CI/CD pipelines.
• Experience designing cloud logging, monitoring and threat-detection capabilities.
• Ability to create architecture designs and communicate technical decisions clearly.
• Strong stakeholder-management and technical-assurance experience.
• SC (essential) & NPPV3 Clearance (desirable).

Responsibilities

• Provide technical and infrastructure architecture oversight across an AWS-hosted platform.
• Translate business needs into traceable technical and security requirements.
• Produce high-level designs, architecture decisions and supporting technical documentation.
• Review solution designs, supplier proposals and technical notes.
• Lead the resolution of architecture, integration and platform-level issues.
• Identify technical risks, security weaknesses and areas of technical debt.
• Design secure integration between Microsoft Entra ID and AWS.
• Develop conditional-access, privileged-access and approval policies.
• Improve the resilience and availability of identity services, including Keycloak and OTP solutions.
• Embed automated security controls into Terraform and CI/CD pipelines.
• Design security monitoring using services such as AWS Security Lake, CloudWatch and Microsoft Defender for Cloud.
• Support threat detection through centralised logging, tailored alerts and anomaly monitoring.
• Share knowledge and provide technical guidance to engineering teams.

Skills

AWS cloud

Security architecture

Identity & access management

Entra ID

Privileged identity management

Conditional access

Access-control policies

Terraform

DevSecOps

Security monitoring

Threat detection

Architecture design

Stakeholder management

Technical assurance

Tools

Terraform

Job description

SR2 | Socially Responsible Recruitment | Certified B Corporation is seeking an experienced AWS Cloud Architect to lead secure cloud design for a major public-sector programme. This remote-first contract role requires architecture leadership, threat monitoring, and DevSecOps integration across AWS and Entra ID.

The role covers secure identity integration, policy development, and design documentation, with on-demand onsite support in London. Strong security accreditation will be highly valued.