Cloud Platform Security Architect

Skills

• azure
• cloud
• networking

Must have

1. CCSP, CISSP, or equivalent industry-recognised cloud/security certification
2. Strong knowledge of Microsoft Azure architecture: networking, identity, security, compute, storage, monitoring, governance
3. Strong knowledge of Azure landing zones, Management Groups, Azure Policy, RBAC, PIM and cloud governance
4. Strong enterprise networking and security knowledge: routing, segmentation, firewalls, VPNs, private connectivity
5. Advanced knowledge of Active Directory, Entra ID, Conditional Access, MFA, PIM, SSO, certificates and authentication
6. Strong understanding of Microsoft Defender, Sentinel, Zero Trust and cloud security architecture
7. Strong understanding of hybrid infrastructure, resilience, backup and disaster recovery architecture
8. Practical understanding of Infrastructure as Code, including Terraform, Azure DevOps and automated cloud deployment
9. Understanding of AI-enabled technologies and their architecture and security considerations
10. Strong knowledge of architecture governance, design assurance, reference architectures and technical standards
11. Strong analytical, communication, influencing and stakeholder-management skills
12. Extensive experience designing and assuring cloud platform, security and hybrid infrastructure architectures in complex enterprise environments
13. Proven senior architecture role experience with Azure, networking, identity, governance, resilience and platform security
14. Experience developing target-state architectures, reference architectures, standards and reusable patterns
15. Experience providing architecture assurance through design-authority or architecture-governance processes
16. Experience supporting cloud migration, modernisation, re-platforming and technology transformation initiatives
17. Experience identifying and managing architectural risk, technical debt, lifecycle and obsolescence
18. Experience with Infrastructure as Code and automated cloud deployment, including Terraform and Azure DevOps
19. Experience working across Enterprise Architecture, Cyber Security, Product, Engineering, operations, suppliers and managed-service partners
20. Experience communicating complex architecture decisions, risks and options to technical and non-technical stakeholders
21. Experience producing technology roadmaps, architecture documentation and decision records
22. Experience working within a regulated environment

Nice to have

1. Microsoft Certified: Azure Solutions Architect Expert, or demonstrable equivalent expertise
2. TOGAF or equivalent architecture framework knowledge
3. Additional certifications such as Microsoft Azure Security Engineer, CCNP or HashiCorp Terraform Associate
4. Experience with FinOps and cloud cost-optimisation practices
5. Knowledge of AI governance, responsible AI and emerging AI security considerations
6. Experience with enterprise architecture modelling and documentation tools
7. Knowledge of Data Security Posture Management (DSPM) and wider cloud security technologies
8. Experience with SIEM/SOAR technologies beyond Microsoft Sentinel

Full description