Senior AI & Cloud Security Architect

Northbridge; Stockholms kommun; On-site; SEK 1,400,000 - 2,000,000; Full time

Job summary

Northbridge Security is seeking a Senior AI & Cloud Security Architect to help clients design secure, compliant AI solutions from the outset. You will advise leadership on AI risk and translate security controls into practical deployments across modern cloud platforms.

You will work with regulated industries, shaping reference architectures for Azure, AWS and GCP, and contribute to Northbridge Security's AI security services and tooling.

Qualifications

• Minimum 10 years in cloud, infrastructure or security architecture at architect level.
• Hands-on experience building or securing generative AI solutions, incl. production exposure on major platforms.
• Strong understanding of AI threat landscape and cloud security fundamentals.

Responsibilities

• Design secure reference architectures for AI solutions on Azure, AWS and GCP.
• Threat model LLMs and agent systems for prompt injection, data leakage.
• Define guardrails: identity/isolation for agents, data protection, output validation and audit trails.
• Translate EU AI Act, NIST RMF and ISO/IEC 42001 into technical controls and evidence.
• Run AI security assessments and architecture reviews; advise client leadership.
• Help shape Northbridge Security's AI security services and internal tooling.

Skills

AI threat landscape

Cloud security

Zero Trust

IAM

Encryption

Infrastructure as Code

Fluent in Swedish

Fluent in English

Tools

Azure

AWS

GCP

Job description

As a Senior AI & Cloud Security Architect at Northbridge Security, you'll help clients design AI solutions that are secure, traceable and compliant from the first architecture sketch. You'll be the adviser whose judgement on AI risk carries weight with both engineers and leadership.

AI is moving from pilot to production faster than security models can adapt. Agents get access to tools and systems, models are fed sensitive data, and the EU AI Act is already in force.

Northbridge Security works with AI governance, cloud security and DevSecOps for organisations in regulated industries, and we run the same controls we recommend to our clients.

What you will do

• Design secure reference architectures for AI solutions on Azure, AWS and GCP, from RAG applications to autonomous agents
• Threat model LLM and agent systems for prompt injection, data leakage, excessive agency and supply chain risks
• Define guardrails: identity and isolation for agents, protection of personal data, output validation and audit trails
• Translate the EU AI Act, NIST AI RMF and ISO/IEC 42001 into concrete technical controls and evidence
• Run AI security assessments and architecture reviews, and advise client leadership
• Help shape Northbridge Security's AI security services and internal tooling

What we are looking for

• At least 10 years in cloud, infrastructure or security architecture, at architect level
• Practical experience from recent years of building or securing generative AI solutions, with at least one in or near production, e.g. on Azure AI Foundry/Azure OpenAI, Amazon Bedrock, Vertex AI or self hosted models
• Solid knowledge of the AI threat landscape, e.g. OWASP Top 10 for LLM Applications
• Strong cloud security fundamentals: IAM, Zero Trust, network segmentation, encryption and Infrastructure as Code
• Ability to explain technical risk in business terms, in writing and in meetings
• Fluent in Swedish and English, spoken and written

Nice to have

• MITRE ATLAS and threat modelling frameworks such as STRIDE or MAESTRO
• Experience from regulated industries: life sciences, medical technology, finance or critical infrastructure
• Experience with agent frameworks, MCP or AI coding assistants in an enterprise setting
• Certifications such as AWS Solutions Architect Professional, AWS Security Specialty, Azure Solutions Architect Expert, Azure Security Engineer, CISSP, CCSP, IAPP AIGP or ISO/IEC 42001

Why Northbridge Security

• Senior colleagues who build what they recommend
• A field where practice is being defined now, and you help define it
• Variety: SMB and enterprise clients at different levels of maturity
• Benefits and compensation model (80/20, 70/30, 70/25)