Capco

3 weeks ago

Cloud Architect – Security & Guardrails (AWS/Azure)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Design and secure enterprise-scale AWS and Azure environments by building defense-in-depth security frameworks, automated compliance guardrails, and multi-cloud governance. Own multi-cloud logging and monitoring architecture using SIEM tools for real-time detection, correlation, and alerting. Implement CSPM and vulnerability management, enforce Zero Trust IAM (JIT/PAM/RBAC), and integrate security platforms and EDR/XDR solutions across cloud workloads in a hybrid model.

Location: Warsaw

Workplace: Hybrid

Employment Type: Contract

Job Function: DevOps, Cloud & Infrastructure

Key Responsibilities

•Design, implement, and enforce security baselines and preventative guardrails across AWS and Azure environments using governance frameworks.
•Build multi-cloud logging and monitoring strategies, integrating CloudTrail, GuardDuty, Activity Logs, Defender for Cloud, and SIEM platforms like Sentinel and Splunk.
•Define endpoint and workload protection architectures for EDR/XDR and CWPP, securing VMs, containers, Kubernetes, and serverless workloads.
•Implement and optimize CSPM and vulnerability management processes, enabling continuous security scanning and automated remediation workflows.
•Design and enforce Zero Trust IAM and integrate security technologies and third-party platforms to maintain secure, governed, continuously monitored cloud operations.

Key Requirements

•Extensive experience designing and securing enterprise-scale AWS and Azure environments with deep knowledge of cloud-native security services and governance frameworks.
•Hands-on expertise with SIEM platforms, EDR/XDR technologies, vulnerability management solutions, and CSPM tools.
•Strong experience implementing Azure Policy, AWS Control Tower, Service Control Policies (SCPs), and cloud governance frameworks.
•Advanced Infrastructure as Code skills, particularly with Terraform, and experience embedding security controls into CI/CD and cloud deployment pipelines.
•Strong understanding of modern cyber threats and the MITRE ATT&CK framework, plus the ability to collaborate with Cloud Engineering, SOC, and Risk/Compliance/Audit stakeholders.

Experience:Cloud securityEnterprise securityMulti-cloud

Skills:Stakeholder managementCommunicationCollaboration

Languages:English

Tech Stack:AWSAzureAWS OrganizationsService Control PoliciesAWS Control TowerAzure PolicyAzure Landing ZonesAWS CloudTrailAmazon GuardDutyAzure Activity LogsMicrosoft Defender for CloudMicrosoft SentinelSplunkEDRXDRCWPPKubernetesServerlessCloud Security Posture ManagementCSPM

Company Brief

Capco

Global management and technology consultancy specializing in financial services. Capco advises banks, insurers, and capital markets firms on digital transformation, risk and compliance, technology implementation, and operational improvement, combining industry expertise with advisory and engineering capabilities.

Industry: Management Consulting

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: London, United Kingdom

Founded: 1998

Glassdoor: 3.7

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Capco

3 weeks ago

Cloud Architect – Security & Guardrails (AWS/Azure)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: Warsaw

Workplace: Hybrid

Employment Type: Contract

Job Function: DevOps, Cloud & Infrastructure

Key Responsibilities

•Design, implement, and enforce security baselines and preventative guardrails across AWS and Azure environments using governance frameworks.
•Build multi-cloud logging and monitoring strategies, integrating CloudTrail, GuardDuty, Activity Logs, Defender for Cloud, and SIEM platforms like Sentinel and Splunk.
•Define endpoint and workload protection architectures for EDR/XDR and CWPP, securing VMs, containers, Kubernetes, and serverless workloads.
•Implement and optimize CSPM and vulnerability management processes, enabling continuous security scanning and automated remediation workflows.
•Design and enforce Zero Trust IAM and integrate security technologies and third-party platforms to maintain secure, governed, continuously monitored cloud operations.

Key Requirements

•Extensive experience designing and securing enterprise-scale AWS and Azure environments with deep knowledge of cloud-native security services and governance frameworks.
•Hands-on expertise with SIEM platforms, EDR/XDR technologies, vulnerability management solutions, and CSPM tools.
•Strong experience implementing Azure Policy, AWS Control Tower, Service Control Policies (SCPs), and cloud governance frameworks.
•Advanced Infrastructure as Code skills, particularly with Terraform, and experience embedding security controls into CI/CD and cloud deployment pipelines.
•Strong understanding of modern cyber threats and the MITRE ATT&CK framework, plus the ability to collaborate with Cloud Engineering, SOC, and Risk/Compliance/Audit stakeholders.

Experience:Cloud securityEnterprise securityMulti-cloud

Skills:Stakeholder managementCommunicationCollaboration

Languages:English

Company Brief

Capco

Industry: Management Consulting

Company Size: Enterprise (1,001+ employees)

Growth: Established Company

Headquarters: London, United Kingdom

Founded: 1998

Glassdoor: 3.7

Website LinkedIn