Cloud Security Architect

Expleo Group; Lisboa; On-site; EUR 60,000 - 80,000; Full time

Job summary

Expleo Group is seeking a security-focused engineer to define and implement secure architectures across AWS, automation, and cloud platforms. The role involves hands-on development, IaC with Terraform, and leading security initiatives across large, multi-account environments.

Ideal candidates have strong cloud security experience, the ability to translate policy into technical controls, and a track record of delivering reusable security frameworks within complex environments.

Qualifications

• Proven AWS security architecture and engineering experience.
• Hands-on development in Python.
• Strong experience with Terraform for IaC.
• Experience building cloud platforms or shared services.
• Experience in large-scale, multi-account environments.

Responsibilities

• Define and implement security reference architectures (IAM, logging, detection, vulnerability management).
• Design and build secure cloud landing zone patterns.
• Translate policy and regulatory requirements into technical controls.
• Develop reusable security frameworks (Terraform modules, policy-as-code, pipelines).
• Make strategic tooling and integration decisions.
• Provide technical leadership across engineering teams and partners.

Skills

AWS security architecture

Python development

Cloud platforms

Multi-account environments

Tools

Terraform

Job description

Overview

Expleo is a trusted partner for your innovation journey. As a global engineering, technology and consulting service provider, we are ideally positioned to help you achieve your ambitions and future-proof your business. With a smart blend of bold thinking and reliable execution, we’re able to fast-track innovation through each step of your value chain.

We are strategically positioned to build value, with global footprint across 30 countries.We are as global and local as you need us to be, with strong best-in-class pan-European technological centres and unique best-shoring capabilities.

We leverage a network of high value-adding affiliates in consulting and industrial excellence, and leading partners across multiple sectors to provide you with the most comprehensive services and solutions in an ever-changing environment.

Responsibilities

• Define and implement security reference architectures (IAM, logging, detection, vulnerability management);
• Design and build secure cloud landing zone patterns;
• Translate policy and regulatory requirements into technical controls;
• Develop reusable security frameworks (Terraform modules, policy-as-code, pipelines);
• Make strategic tooling and integration decisions;
• Provide technical leadership across engineering teams and partners.

Essential skills

• Strong AWS security architecture and engineering experience;
• Hands-on development (Python preferred);
• Solid experience with Infrastructure-as-Code (Terraform);
• Experience building cloud platforms or shared services;
• Experience in large-scale, multi-account environments.

Desired skills

• Experience in regulated industries
• Experience with AI/LLM security or advanced detection