Lead Cloud Security Architect - Zero Trust & DevSecOps

Malaysian Communications and Multimedia Commission; Cyberjaya; On-site; MYR 180,000 - 300,000; Full time

Job summary

Malaysian Communications and Multimedia Commission seeks a senior security architect to lead development and governance of cloud security architecture and engineering standards. The role ensures secure-by-design implementations, scalable security patterns, and consistent application of security controls across NSAIC platforms.

Responsibilities include defining secure engineering standards, leading zero trust blueprint, and providing assurance for cloud platforms and AI workloads.

Qualifications

• Degree in Cybersecurity, Computer Science, Engineering or related field.
• CISSP, CCSP, TOGAF or SABSA certifications preferred.
• 10–12 years in cloud security architecture or enterprise security.
• Experience in designing cloud-native and hybrid security architectures.
• Experience in implementing zero trust and DevSecOps framework.
• Experience in leading architecture governance and design reviews.

Responsibilities

• Lead development of cloud security reference architectures – ensuring standardised and reusable secure design patterns.
• Establish security architecture governance framework – ensuring consistent design approval and enforcement.
• Define secure-by-design engineering standards – ensuring integration into DevSecOps and platform engineering.
• Lead zero trust architecture implementation blueprint – ensuring identity-centric security across environments.
• Provide architecture assurance for cloud platforms and AI workloads – ensuring compliance with approved security standards.
• Oversee integration of security controls in infrastructure design – ensuring protection across compute, storage, and network layers.
• Lead technical evaluation of cloud security technologies – ensuring best-fit solutions aligned with sovereign requirements.
• Guide technical teams on secure architecture adoption – ensuring alignment across divisions

Skills

Cloud security

Zero Trust

DevSecOps

Platform security

Threat modelling

Governance

Stakeholder alignment

Education

Cybersecurity degree

CISSP

CCSP

TOGAF

SABSA

Job description

Malaysian Communications and Multimedia Commission seeks a senior security architect to lead development and governance of cloud security architecture and engineering standards. The role ensures secure-by-design implementations, scalable security patterns, and consistent application of security controls across NSAIC platforms.

Responsibilities include defining secure engineering standards, leading zero trust blueprint, and providing assurance for cloud platforms and AI workloads.