Cloud Security Architect

Role Purpose:
The Cloud Security Architect will lead the design, implementation and continuous improvement of secure cloud and Microsoft security solutions across enterprise environments. The role combines architecture, hands-on engineering, incident leadership, governance and client-facing delivery. The architect will translate business and regulatory requirements into scalable security controls, standards, operating procedures and measurable remediation plans.

Key Responsibilities:

• Own cloud security architecture and engineering across Azure and Microsoft 365, with working coverage of AWS, GCP, hybrid cloud and container platforms.
• Design and implement secure cloud foundations, including landing zones, identity controls, network security, encryption, logging, monitoring and governance guardrails.
• Architect and enhance Microsoft security capabilities such as Microsoft Sentinel, Microsoft Defender, Microsoft Purview, Microsoft Entra ID, Azure Key Vault and Intune.
• Lead CNAPP implementation and operations, covering CSPM, CWPP, CDR, KSPM, vulnerability management, asset discovery, compliance posture and threat detection.
• Onboard cloud subscriptions, accounts and Kubernetes environments into security platforms; troubleshoot agent, connector and telemetry issues.
• Define, tune and automate posture, vulnerability and threat-detection policies across workload, container and Kubernetes security services.
• Integrate security platforms with SIEM, SOAR, ITSM and ticketing solutions to improve detection, response and remediation workflows.
• Lead cloud security assessments, identify control gaps, define risk-based remediation plans and track actions through closure.
• Drive investigation and coordination of high-severity cloud security incidents, including stakeholder communications, escalation, root-cause analysis and lessons learned.
• Produce technical designs, architecture diagrams, implementation plans, SOPs, runbooks, incident reports and weekly/monthly service reports.
• Provide technical leadership, mentoring and quality oversight to cloud security engineers and support teams.
• Support client workshops, solution presentations, estimates, proposals, RFP responses, audits and due-diligence activities.

Preferred candidate profile