Job Information
* Company: JR UK
* Client / Employer: HCLTech
* Location: Manchester
* Hybrid mode: 2 days week (Work from client location)
Role Overview
We’re looking for a Cloud Security Architect to shape the future of cloud security architecture and deliver secure, resilient, and scalable solutions.
Key Responsibilities
* Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments.
* Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift.
* Partner with engineering and product teams to embed security guardrails early in design, ensuring compliance and resilience.
* Review external architecture proposals and identify security gaps.
* Document and uphold secure-by-design principles and architecture governance.
* Collaborate with senior partners to articulate security risks and mitigations.
* Anticipate customer needs taking proactive steps to address them.
Required Skills & Experience
* Governance, Risk & Compliance: risk-based decisions, adherence to regulatory and internal security standards.
* Threat Modelling and Risk Management: identify threats and mitigations for complex cloud systems.
* Cloud Security Expertise: broad knowledge across security domains and their capabilities within Azure/GCP and SME experience in at least one area. Familiarity in AWS is also desirable.
* AI/ML Security: knowledge of AI/ML threats and risks, with experience applying security controls for secure deployment of AI services in cloud platforms.
* Application Security: CI/CD Security including secure software supply chain.
* Data Security: key, certificate and secrets management.
* Identity and Access Management: securing user/non-user access at scale.
* Infrastructure Security: Kubernetes (AKS/GKE/Istio), API Security, IaC security (e.g. Terraform, ARM templates).
* Security Logging and Monitoring: security logging, SIEM integration, event correlation.
Desirable Certifications
* Azure Security Engineer Associate, Google Professional Cloud Security Engineer.
* Microsoft Certified: Azure Solutions Architect Expert, Google Professional Cloud Architect.
#J-18808-Ljbffr