Cloud Security Architect

A leading Financial Services Organization is looking for a Cloud Security Architect to join their Security Architecture and Engineering function. This will be a highly technical role, with candidates expected to operate at code level, with some scripting/programming in role.

Responsibilities:

• Develop and maintain a secure architecture for cloud environments, including IaaS, PaaS, and SaaS models. Ensure that security controls are effectively implemented to protect against cyber threats and vulnerabilities.
• Design, implement, and maintain security automation and continuous integration/continuous deployment (CI/CD) pipelines. Integrate security testing tools and practices, such as SAST, DAST, and container scanning, into CI/CD workflows.
• Develop and enforce cloud security policies, standards, and guidelines. Ensure that cloud environments comply with relevant regulatory and industry standards.
• Develop and maintain incident response plans specific to cloud environments. Collaborate with security teams to monitor and respond to security incidents, ensuring effective containment, eradication, and recovery.
• Implement and maintain security controls for IaC tools like Terraform, AWS CloudFormation, and Azure Resource Manager. Conduct code reviews and security assessments to identify and remediate vulnerabilities in IaC scripts.
• Build and deploy automated security solutions for cloud platforms (AWS, Azure, GCP). Develop custom scripts, tools, and modules to automate security tasks such as patch management, vulnerability scanning, and threat detection.
• Work closely with DevOps, engineering, and operations teams to build secure-by-design principles into development lifecycles. Conduct security training and awareness programs to promote a culture of security across teams.
• Design and implement IAM policies and frameworks to ensure least privilege access, secure authentication, and authorization for cloud resources. Manage roles, permissions, and identities within cloud environments.

Required Experience:

• Background in Software/Security Engineering
• Cloud native experience
• Current scripting/programming experience
• Solid understanding of security frameworks and controls

For more information please apply.