Cloud Security Architect

Ekco; Dublin; Ibrido; EUR 120.000 - 180.000; Tempo pieno

Vantaggi offerti da questo lavoro

25 days annual leave

Birthday leave

Employee Assistance Programme (EAP)

Pluralsight access

Career progression opportunities

Descrizione del lavoro

Ekco is seeking a Cloud Security Architect to lead secure cloud transformations for enterprise and regulated clients, focusing on AWS with strong Azure capabilities. The role covers risk translation, architecture design, and delivery across cloud, hybrid and on-premises platforms, with client engagements from discovery to delivery.

The ideal candidate will drive security strategy, governance, and scalable architecture patterns, mentoring engineers while working in a hybrid Dublin-based role that

Competenze

• Substantial experience designing and assuring secure enterprise cloud architectures.
• Deep practical experience in AWS with strong Azure knowledge.
• Hands-on with cloud governance, landing zones and IaC pipelines.

Mansioni

• Define security strategies, architectures and remediation roadmaps.
• Design landing zones and guardrails aligned with AWS and Azure frameworks.
• Lead threat modelling, architecture reviews and security decision-making.
• Embed policy as code into CI/CD workflows across AWS and Azure.
• Define logging, monitoring and incident-response requirements.

Conoscenze

AWS

Azure

Cloud security

DevSecOps

Threat modelling

Formazione

Relevant degree or equivalent

Strumenti

Terraform

AWS CloudFormation

Bicep

GitHub Actions

Azure DevOps

Descrizione del lavoro

Founded in 2016, Ekco has quickly become one of Europe’s fastest-growing cloud solution providers and your trusted security-first Managed Service Provider.

IT leaders choose Ekco to drive operational efficiency, scale smarter and stay ahead of risk – powered by local expertise, delivered at European scale.

We specialise in helping organisations advance their cloud maturity guiding transformation, strengthening security, and maximising the value of their technology investments.

In simple terms: we help organisations modernise with confidence securing their systems, optimising their cloud, and keeping them resilient in a rapidly changing world.

Today, we’re a thriving team of 1,000+ talented and supportive colleagues across the UK, Ireland, Benelux, South Africa, and Malaysia—and we’re continuing to grow.

At Ekco, how we work matters as much as what we deliver. Our people live by four core values that shape everything we do:

• On It: We take ownership, follow through, and get things done.
• All In: We collaborate, support each other, and commit fully to shared goals.
• Connected: We build trusted relationships with colleagues, clients, and partners.
• Hungry to Grow: We stay curious, keep learning, and push ourselves to the next level.

If these values resonate with you, you’ll feel right at home here.

The Role

Day-to-day at Ekco

We are looking for an experienced Cloud Security Architect to lead secure cloud transformation for enterprise and regulated clients, with a particular focus on AWS and strong capability across Microsoft Azure. You will assess complex environments, define security strategies and architectures, and guide the delivery of secure solutions across cloud, hybrid and on-premises platforms.

As a trusted advisor, you will translate risk, regulatory obligations and business objectives into practical security designs, assessments and improvement roadmaps. You will lead client engagements from discovery and pre-sales through design assurance and delivery, provide technical leadership to colleagues, produce clear technical and executive artefacts, and help productise reusable Ekco architecture patterns and cloud security services. This hybrid role is based in Dublin and may include travel to client sites.

What you’ll be responsible for:

• Security strategy and assurance: Assess cloud, hybrid and on-premises environments; define security strategies, target architectures, policies, risk registers and prioritised remediation roadmaps aligned to regulatory and industry frameworks.
• Secure cloud architecture: Design landing zones and guardrails aligned with the AWS and Microsoft Cloud Adoption Frameworks, with particular depth in AWS multi-account architectures and strong experience of Azure enterprise-scale landing zones. Apply Zero Trust principles, network segmentation, encryption, key and secrets management, data protection, sovereignty, and secure backup and recovery patterns.
• Identity security: Architect workforce, privileged and workload identity controls using AWS IAM and Microsoft Entra ID, including federation, Conditional Access, identity governance and privileged access management.
• Cloud-native security and governance: Design scalable organisation-level controls, security posture management, and policy enforcement using AWS Organizations, AWS Control Tower, AWS Security Hub, and Amazon GuardDuty, alongside Azure management groups, Azure Policy, Microsoft Defender for Cloud, and Microsoft Sentinel.
• Threat modelling and design assurance: Lead threat modelling, architecture reviews and security decision-making for applications, platforms, data services and emerging AI use cases.
• DevSecOps and automation: Embed policy as code, security testing, secrets scanning, dependency, container and software supply-chain controls into infrastructure-as-code and CI/CD workflows across AWS and Azure.
• Detection, resilience and response: Define logging, monitoring, detection and cloud incident-response requirements; integrate cloud platforms with SIEM and SOC services; and improve ransomware and operational resilience.
• Client and team leadership: Lead workshops and technical workstreams, support pre-sales and statements of work, mentor and guide architects and engineers, and communicate architecture decisions, risks and recommendations to technical and executive stakeholders. Contribute to the productisation of repeatable cloud security offerings, delivery methods and reusable assets.
• Substantial experience designing and assuring secure enterprise cloud architectures, with deep practical experience in AWS and strong hands‑on expertise across Microsoft Azure and hybrid environments.
• Strong knowledge of identity, network, platform, application, data, security operations and resilience controls, including Zero Trust and shared‑responsibility principles.
• Hands‑on experience with cloud governance, landing zones, multi-account or multi-subscription operating models, Infrastructure as Code, and DevSecOps delivery using tools such as Terraform, AWS CloudFormation, Bicep, GitHub Actions, AWS CodePipeline, or Azure DevOps.
• Experience applying regulatory and security requirements such as GDPR, NIS2, DORA, ISO 27001, NIST, CIS, CSA and OWASP to cloud environments.
• Ability to conduct security assessments and threat modelling, evaluate technical risk, and produce architecture diagrams, security designs, risk registers, remediation roadmaps and executive reports.
• Strong consulting, team leadership and stakeholder‑management skills, including mentoring technical teams, workshop facilitation, pre‑sales support and clear communication of complex risk.
• Experience developing reusable architecture patterns, delivery accelerators, or productised cloud security services. A relevant degree or equivalent professional experience is also required.

Nice to Have's

• Experience implementing cloud security guardrails at scale across complex enterprise or regulated environments.
• Experience with Kubernetes, container security, software supply‑chain controls, AI security, data protection or regulated‑industry environments.
• Relevant certifications such as AWS Certified Security – Specialty or AWS Certified Solutions Architect – Professional, together with Microsoft Certified: Cybersecurity Architect Expert or Azure Security Engineer Associate. HashiCorp Certified: Terraform Associate, CISSP, CCSP or CISM would also be valuable; equivalent practical experience is equally valued.
• Professional membership or accreditation with ISC2, ISACA, CiiSec or BCS.

• Time Off: 25 days annual leave + public holidays
• Birthday Leave: One extra day off to celebrate
• Employee Assistance Programme (EAP) for wellbeing support
• Unlimited access to Pluralsight for continuous development
• Real opportunities to grow, including international progression

Why Ekco

• Company of the year 2026 Tech Excellence Awards
• Microsoft 2023 Rising Star Security Partner of the Year
• First Irish Microsoft MSP to achieve all four Microsoft Security Specialisations
• A culture rooted in diversity, equity, inclusion, and belonging
• Strong commitment to internal mobility and career progression
• Flexible, family‑friendly working at the heart of our culture
• A trusted, security‑first MSP helping organisations scale smarter and stay ahead of risk