Cloud Security Architect

At Provido, we’re more than a technology company. We are a global hub of innovation, creativity, and engineering excellence.

Our teams design and deliver intelligent, secure, and high-performance digital solutions that help organizations modernize operations, scale their platforms, and succeed in an increasingly digital world.

As part of a dynamic international ecosystem, we bring together forward-thinking engineers, technology specialists, designers, and delivery professionals who transform ideas into scalable, real-world solutions with measurable business impact.
If you are motivated by challenge, inspired by technology, and ready to grow with a company that truly invests in its people, your journey starts here.

👉 Why We Need You

The Cloud Security Architect is responsible for designing, governing, and continuously improving secure cloud architecture across the organization, with primary focus on Microsoft Azure environments. This role defines security patterns, guardrails, and architecture standards for Azure landing zones, identity and access management, network security, data protection, key management, workload security, logging, monitoring, and compliance controls. The architect will work closely with cloud engineering, infrastructure, application, DevSecOps, security operations, risk, and business teams to ensure cloud services are securely designed, deployed, and operated in alignment with enterprise security policies, regulatory expectations, and industry best practices. While the role may provide guidance across multi-cloud environments where required, Azure security architecture, governance, and control implementation shall be the principal area of responsibility.

👉 What You’ll Be Doing

• Design and maintain secure Azure cloud architecture standards, reference architectures, and reusable security patterns for infrastructure, platform, application, and data workloads.

• Define and govern Azure landing zone security controls, including management group structure, subscription governance, Azure Policy, resource tagging, network segmentation, security baselines, and compliance guardrails.

• Architect identity and access security solutions using Microsoft Entra ID, privileged access controls, conditional access, role-based access control, managed identities, and least-privilege access principles.

• Provide security architecture guidance for Azure networking, including hub-and-spoke models, private endpoints, network security groups, Azure Firewall, DDoS protection, application gateways, and secure connectivity patterns.

• Define data protection and cryptographic control requirements for Azure workloads, including Key Vault, encryption, secrets management, certificate management, backup, recovery, and secure data storage controls.