Cloud Security Architect, Ekco

• Substantial experience designing and assuring secure enterprise cloud architectures, preferably in Microsoft Azure, with practical knowledge of AWS and hybrid environments
• Strong knowledge of identity, network, platform, application, data, security operations and resilience controls, including Zero Trust and shared responsibility principles
• Hands-on experience with cloud governance, landing zones, Infrastructure as Code and automated delivery using Terraform, Bicep or equivalent tooling and Azure DevOps or GitHub Actions
• Experience applying regulatory and security requirements such as GDPR, NIS2, DORA, ISO 27001, NIST, CIS, CSA and OWASP to cloud environments
• Ability to conduct security assessments and threat modelling, evaluate technical risk, and produce architecture diagrams, security designs, risk registers, remediation roadmaps and executive reports
• Strong consulting, leadership and stakeholder-management skills, including workshop facilitation, pre-sales support and the ability to explain complex risk in clear business language
• A degree in a relevant discipline or equivalent professional experience

Desirable

• We are looking for an experienced Cloud Security Architect to lead secure cloud transformation for enterprise and regulated clients
• You will assess complex environments, define security strategies and architectures, and guide the delivery of secure solutions across cloud, hybrid and on-premises platforms
• As a trusted advisor, you will translate risk, regulatory obligations and business objectives into practical security designs, assessments and improvement roadmaps
• You will lead client engagements from discovery and pre-sales through design assurance and delivery, produce clear technical and executive artefacts, and help shape reusable Ekco architecture patterns and services
• This hybrid role is based in Dublin and may include travel to client sites
• Security strategy and assurance: Assess cloud, hybrid and on-premises environments; define security strategies, target architectures, policies, risk registers and prioritised remediation roadmaps aligned to regulatory and industry frameworks
• Secure cloud architecture: Design Cloud Adoption Framework aligned landing zones and guardrails across Azure and AWS, using Zero Trust principles, network segmentation, encryption, key and secrets management, data protection, sovereignty and secure backup and recovery patterns
• Identity security: Architect workforce, privileged and workload identity controls using Microsoft Entra ID and AWS IAM, including Conditional Access, identity governance and privileged access management
• Cloud-native security: Design posture management, policy enforcement and organisation level controls using services such as Azure Policy, Microsoft Defender for Cloud, Microsoft Sentinel, AWS Control Tower, Security Hub and GuardDuty
• Threat modelling and design assurance: Lead threat modelling, architecture reviews and security decision making for applications, platforms, data services and emerging AI use cases
• DevSecOps and automation: Embed policy as code, security testing, secrets scanning, dependency, container and software supply chain controls into infrastructure-as-code and CI/CD workflows
• Detection, resilience and response: Define logging, monitoring, detection and cloud incident response requirements; integrate cloud platforms with SIEM and SOC services; and improve ransomware and operational resilience
• Client leadership: Lead workshops and technical workstreams, support pre-sales and statements of work, mentor colleagues, and communicate architecture decisions, risks and recommendations to technical and executive stakeholders