AWS Architect

Margoconsulting; Warszawa; On-site; PLN 180,000 - 280,000; Full time

Job summary

Margoconsulting is seeking an IT Security Architect to own the bank's security architecture across networks, cloud, and applications. You will run PoCs, assess tools, and ensure encryption and access controls are correctly implemented.

The role blends hands-on delivery with clear communication to both technical and non-technical stakeholders. The position requires hands-on expertise across security domains and the ability to translate complex concepts for diverse audiences within a banking

Qualifications

• Owns the IT security architecture across networks, clouds, and applications.
• Evaluates PoCs to decide if a security tool should be adopted.
• Ensures encryption and access controls are properly implemented.

Responsibilities

• Design, maintain and update security architecture across environments.
• Review risk analyses to validate threat realism and controls effectiveness.
• Run PoCs on security tools to assess value and integration complexity.
• Collaborate with security groups to roll out security processes aligned with strategy.
• Explain complex security concepts to both technical and non-technical audiences.

Skills

Security architecture

Risk analysis

PoC evaluation

Encryption

Access controls

Cross-functional collaboration

Tools

SIEM

EDR

XDR

DLP

WAF

NDR

Firewalls

PKI

Job description

IT Security Architect

If you love diving deep into security architecture and want your work to actually matter — not just tick compliance boxes — this might be the role for you.

What you’ll actually be doing

You’ll own the IT security architecture. That means designing it, keeping it up to date, and making sure it gets implemented properly — not just on paper, but in real systems, real environments, and real projects.

On any given week you might be:

• Reviewing a risk analysis to check whether the threat scenarios are realistic and whether the proposed controls will genuinely hold up
• Running a PoC on a promising new security tool to see if it’s worth bringing into the stack
• Making sure legally protected information is handled correctly across the bank’s systems — encryption, access controls, the works
• Rolling out new security processes or solutions that align with where the bank’s security strategy is headed
• Collaborating with group‑level security teams across the organization

The technical range here is real. You’ll work across network security, cloud environments, application security, cryptography, PKI, and a solid suite of security tooling — SIEM, EDR, XDR, DLP, WAF, DAM, NDR, firewalls, and more. If you like staying sharp across multiple domains rather than being siloed into one, you’ll feel at home.

A few things worth knowing

This isn’t a purely advisory role — you’ll be hands‑on. You’ll run PoCs, evaluate solutions technically, and be part of getting things actually deployed. At the same time, you’ll be working with people across the bank, so being able to explain complex security concepts clearly (to both technical and non‑technical audiences) is genuinely important here.