Senior Security Architect: Cloud, Zero-Trust & Resilience

Capgemini; Singapore; Hybrid; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive remuneration and benefits

Flexible working arrangements

Global opportunities

Job summary

Capgemini Singapore is seeking a Senior Security Architect to design and own the security architecture for a large-scale enterprise platform, embedding secure-by-design practices across the SDLC and partnering with engineering to implement controls.

You will lead threat modelling, define IAM, zero-trust patterns, encryption, and network segmentation, with experience across AWS, Azure, and GCP. A strong hands-on engineering background and ability to mentor teams are essential.

Qualifications

• 10+ years in software engineering and cybersecurity.
• Experience designing security architecture for large-scale, mission-critical systems.
• Hands-on engineering ability to design secure solutions and mentor teams.
• Ability to collaborate with software engineers to improve application security.
• Balance security, scalability, resilience, and operational needs.

Responsibilities

• Design and own the security architecture for a large-scale enterprise platform.
• Define trust boundaries, IAM, network segmentation, encryption, and zero-trust patterns.
• Embed secure-by-design principles throughout the SDLC.
• Partner with engineering to implement security controls in designs.
• Develop threat models to identify risks and influence decisions.
• Drive DevSecOps, policy-as-code, and security automation practices.
• Provide technical leadership and mentor engineering teams on security tooling.

Tools

AWS

Azure

GCP

CI/CD platforms

Kubernetes

Identity and access management

Security automation

Zero Trust

Job description

Capgemini Singapore is seeking a Senior Security Architect to design and own the security architecture for a large-scale enterprise platform, embedding secure-by-design practices across the SDLC and partnering with engineering to implement controls.

You will lead threat modelling, define IAM, zero-trust patterns, encryption, and network segmentation, with experience across AWS, Azure, and GCP. A strong hands-on engineering background and ability to mentor teams are essential.