Cloud Security Architect

We are seeking a Cloud Security Architect to design, review, and govern secure cloud architectures, primarily within Microsoft Azure, with awareness of multi-cloud environments. The role will establish security architecture patterns, apply Zero Trust principles, and ensure cloud solutions meet organizational security, risk, and compliance requirements.

Key Responsibilities

• Design and review secure cloud architectures across IaaS, PaaS, and SaaS, primarily within Microsoft Azure, while considering multi-cloud environments.
• Define and maintain cloud security architecture patterns, reference architectures, standards, and security guardrails covering identity, data protection, network security, and workload security.
• Apply industry-recognized security frameworks, including NIST Cybersecurity Framework, NIST SP 800-series, and CSA Cloud Controls Matrix (CCM), to guide architecture decisions and ensure appropriate security control coverage.
• Incorporate Zero Trust principles into cloud and SaaS architectures, emphasizing identity-centric access, least privilege, segmentation, continuous verification, and defense-in-depth.
• Provide architectural guidance for data protection and Data Loss Prevention (DLP) across cloud and SaaS environments, including data classification, labeling, encryption, access controls, and information protection.
• Provide security architecture guidance for Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) capabilities to support workload monitoring, hardening, vulnerability management, and resilience.
• Assess and recommend appropriate Azure security controls and services, including identity and access management, network security, secrets management, encryption, and workload protection.
• Ensure cloud security designs and recommendations align with organizational security policies, standards, risk management requirements, and governance frameworks.
• Maintain and continuously improve internal documentation covering cloud security standards, approved architectures, reference designs, and implementation guidance.
• Collaborate with security, infrastructure, application, data, and business stakeholders to clarify requirements, evaluate risks, and drive secure architectural decisions.
• Communicate complex security concepts and architectural recommendations effectively to both technical and non-technical stakeholders.
• Stay current with emerging cloud security technologies, threats, standards, and best practices, and recommend improvements to the organization's cloud security architecture.

Required Qualifications

• 3–5 years of experience in cloud security architecture, secure cloud design, cloud security engineering, or a closely related field.
• Strong hands-on knowledge of Microsoft Azure and cloud security concepts, including:
• Azure identity and access management
• Network security controls
• Secrets and key management
• Encryption and data protection
• Azure IaaS and PaaS security
• Experience or exposure to modern cloud security technologies such as CSPM, CWPP, Microsoft Purview Information Protection, and DLP, preferably including configuration, testing, or implementation.
• Strong understanding of core cloud security principles, including:
• Zero Trust
• Least-privilege access
• Identity-centric security
• Defense-in-depth
• Network segmentation
• Secure service-to-service communication
• Protection of data at rest and in transit
• Strong knowledge of data protection, DLP, data classification and labeling, CSPM, and cloud workload security/hardening.
• Proven experience designing cloud solutions where security, data protection, and resilience against cyber threats are foundational requirements.
• Familiarity with security frameworks and standards such as CSA Cloud Controls Matrix (CCM), NIST Cybersecurity Framework, and/or NIST SP 800-series guidance.
• Working knowledge of Zero Trust architecture and its application to cloud and SaaS environments.
• Strong analytical, collaboration, and communication skills, with the ability to explain security architecture decisions clearly.
• Ability to work independently, proactively engage stakeholders, identify risks, recommend solutions, and drive decisions to completion.
• Experience working in regulated, highly controlled, or risk-sensitive environments is an advantage.

Preferred Qualifications

• Hands-on experience with Microsoft Purview Information Protection and Data Governance.
• Awareness or hands-on experience with AWS security services and multi-cloud security concepts.
• Experience mapping cloud security architectures and controls to CSA, NIST, or similar frameworks for risk assessments, governance, or audit readiness.
• Experience with cloud security governance, architecture reviews, security assessments, or control validation.
• Relevant certifications such as:
• Microsoft Certified: Azure Security Engineer Associate
• Microsoft Certified: Azure Solutions Architect Expert
• CCSP
• CISSP
• Or other relevant cloud/security certifications.

Application Question(s):

• When is your earliest availability to start?
• What is your expected salary in Philippine Peso (PHP)?
• Are you open to a project-based role (3 months) with a possible of extension?

Education:

• Bachelor's (Preferred)

Experience:

• Cloud Security / Cloud Security Architecture: 3 years (Preferred)
• Microsoft Azure security: 3 years (Preferred)
• Data Protection & DLP: 2 years (Preferred)
• CSPM / CWPP: 2 years (Preferred)
• Cloud Security Frameworks: 2 years (Preferred)
• Stakeholder Management & Security Architecture Documentation: 2 years (Preferred)
• Cloud Security Principles: 3 years (Preferred)

Work Location: Remote