Cloud Security Architect (Hybrid)

blaseek; Metro Manila; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

blaseek is seeking an experienced Cloud Security Architect to design, govern, and continuously improve security architecture across cloud and hybrid environments. You will ensure cloud platforms are secure by design, aligned with Zero Trust principles, and integrated into enterprise IT and business operations.

The role requires hands-on cloud security expertise across Azure, AWS, and/or GCP, with a strong emphasis on IAM, network security, and risk assessments.

Qualifications

• Proven experience as a Cloud Security Architect or senior cloud security engineer.
• Hands-on knowledge of cloud security services across Azure, AWS, or GCP.
• Strong understanding of Zero Trust and identity-first security models.

Responsibilities

• Design and maintain cloud security architectures across Azure, AWS, and/or GCP environments.
• Define cloud security standards, reference architectures, and design patterns aligned with Zero Trust principles.
• Partner with platform, infrastructure, and application teams to embed security into cloud solutions from design through deployment.
• Lead security design reviews, threat modeling, and risk assessments for cloud-based initiatives.
• Architect identity-centric security models covering IAM and workload security.

Skills

Cloud security

Azure AWS GCP

Zero Trust

IAM & workload security

Networking & encryption

Threat modeling

Security governance

Stakeholder communication

Security frameworks (NIST/ISO/PCI)

Job description

We are seeking an experienced Cloud Security Architect to design, govern, and continuously improve security architecture across cloud and hybrid environments. This role is responsible for ensuring cloud platforms are secure by design, aligned with Zero Trust principles, and integrated smoothly into enterprise IT and business operations.

What you’ll do

• Design and maintain cloud security architectures across Azure, AWS, and/or GCP environments
• Define cloud security standards, reference architectures, and design patterns aligned with Zero Trust principles
• Partner with platform, infrastructure, and application teams to embed security into cloud solutions from design through deployment
• Lead security design reviews, threat modeling, and risk assessments for cloud-based initiatives
• Architect identity-centric security models covering IAM, least-privilege access, conditional access, and workload identity
• Define and guide implementation of network security, segmentation, and secure connectivity in cloud and hybrid setups
• Establish security controls for cloud workloads, data protection, logging, monitoring, and incident readiness
• Ensure cloud security architectures align with frameworks such as NIST, ISO 27001, and industry best practices
• Advise stakeholders on security trade-offs, risks, and design decisions in clear and practical terms
• Support governance activities including architecture documentation, risk acceptance, and compliance alignment

What we’re looking for

• Proven experience as a Cloud Security Architect or senior cloud-focused security engineer
• Strong hands-on knowledge of cloud security services and controls in Azure, AWS, or GCP
• Solid experience designing Zero Trust and identity-first security models in cloud environments
• Deep understanding of IAM, cloud networking, encryption, logging, and workload security
• Ability to translate high-level security concepts into structured, implementable cloud architectures
• Experience working closely with engineering teams, architects, and business stakeholders
• Familiarity with security frameworks such as NIST CSF, ISO 27001, PCI DSS, or similar
• Strong communication skills, with the ability to clearly explain complex cloud security designs

Nice to have

• CISSP, CCSP, or relevant cloud security certifications
• Experience with cloud-native security platforms (e.g., CSPM, CNAPP, cloud SIEM)
• Background in DevSecOps or secure CI/CD pipeline design

Other details

• Start date: Immediate or short notice preferred
• Work setup: Hybrid (details to be discussed)