Cloud Architect – Security & Guardrails (AWS/Azure)

Capco
Warsaw
Workplace: HybridContractFunction: DevOps, Cloud & InfrastructureSkills: ["Stakeholder management","Communication","Collaboration"]

Design and secure enterprise-scale AWS and Azure environments by building defense-in-depth security frameworks, automated compliance guardrails, and multi-cloud governance. Own multi-cloud logging and monitoring architecture using SIEM tools for real-time detection, correlation, and alerting. Implement CSPM and vulnerability management, enforce Zero Trust IAM (JIT/PAM/RBAC), and integrate security platforms and EDR/XDR solutions across cloud workloads in a hybrid model.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Capco
Capco
2 months ago

Cloud Architect – Security & Guardrails (AWS/Azure)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 18 hours agoStatus: Live

Job Summary

Design and secure enterprise-scale AWS and Azure environments by building defense-in-depth security frameworks, automated compliance guardrails, and multi-cloud governance. Own multi-cloud logging and monitoring architecture using SIEM tools for real-time detection, correlation, and alerting. Implement CSPM and vulnerability management, enforce Zero Trust IAM (JIT/PAM/RBAC), and integrate security platforms and EDR/XDR solutions across cloud workloads in a hybrid model.
Location: Warsaw
Workplace: Hybrid
Employment Type: Contract
Job Function: DevOps, Cloud & Infrastructure

Key Responsibilities

  • •Design, implement, and enforce security baselines and preventative guardrails across AWS and Azure environments using governance frameworks.
  • •Build multi-cloud logging and monitoring strategies, integrating CloudTrail, GuardDuty, Activity Logs, Defender for Cloud, and SIEM platforms like Sentinel and Splunk.
  • •Define endpoint and workload protection architectures for EDR/XDR and CWPP, securing VMs, containers, Kubernetes, and serverless workloads.
  • •Implement and optimize CSPM and vulnerability management processes, enabling continuous security scanning and automated remediation workflows.
  • •Design and enforce Zero Trust IAM and integrate security technologies and third-party platforms to maintain secure, governed, continuously monitored cloud operations.

Key Requirements

  • •Extensive experience designing and securing enterprise-scale AWS and Azure environments with deep knowledge of cloud-native security services and governance frameworks.
  • •Hands-on expertise with SIEM platforms, EDR/XDR technologies, vulnerability management solutions, and CSPM tools.
  • •Strong experience implementing Azure Policy, AWS Control Tower, Service Control Policies (SCPs), and cloud governance frameworks.
  • •Advanced Infrastructure as Code skills, particularly with Terraform, and experience embedding security controls into CI/CD and cloud deployment pipelines.
  • •Strong understanding of modern cyber threats and the MITRE ATT&CK framework, plus the ability to collaborate with Cloud Engineering, SOC, and Risk/Compliance/Audit stakeholders.
Experience:Cloud securityEnterprise securityMulti-cloud
Skills:Stakeholder managementCommunicationCollaboration
Languages:English
Tech Stack:AWSAzureAWS OrganizationsService Control PoliciesAWS Control TowerAzure PolicyAzure Landing ZonesAWS CloudTrailAmazon GuardDutyAzure Activity LogsMicrosoft Defender for CloudMicrosoft SentinelSplunkEDRXDRCWPPKubernetesServerlessCloud Security Posture ManagementCSPM

Company Brief

Capco
Global management and technology consultancy specializing in financial services. Capco advises banks, insurers, and capital markets firms on digital transformation, risk and compliance, technology implementation, and operational improvement, combining industry expertise with advisory and engineering capabilities.
Industry: Management Consulting
Company Size: Enterprise (1,001+ employees)
Growth: Established Company
Headquarters: London, United Kingdom
Founded: 1998
Glassdoor
Glassdoor: 3.7
WebsiteLinkedIn