Cloud Security Architect

About the Role

A premier technology consultancy headquartered in Brisbane is seeking a seasoned Cloud Security Architect to support complex enterprise cloud environments. The primary focus is on designing and sustaining secure AWS infrastructures by embedding regulatory and security requirements throughout the cloud development and deployment lifecycle. This influential senior position requires collaboration with cloud engineers, application teams, infrastructure experts, and security professionals to elevate the organization's cloud security measures.

Key Responsibilities

• Architect and sustain secure AWS cloud environments compliant with organisational policies and regulatory standards.
• Develop security frameworks encompassing identity and access management, network protections, encryption, data safeguards, and monitoring systems.
• Implement security guardrails and architectural templates for AWS accounts, including landing zones, network partitioning, and multi-account setups.
• Provide expert security guidance for AWS infrastructure, applications, platforms, and native cloud services.
• Perform comprehensive architecture reviews, threat modelling exercises, and security risk evaluations.
• Detect security vulnerabilities and prescribe effective remediation approaches.
• Define standardized secure configurations, reference architectures, and repeatable security controls.
• Enhance AWS-native security capabilities including monitoring, configuration management, threat detection, and vulnerability management.
• Advise on security architecture relating to cloud migration and transformation projects.
• Participate in security incident investigations and guide architectural remediation strategies.
• Create detailed security standards, procedures, risk assessments, and technical design documents.
• Promote cloud security improvements through automation, governance enhancement, and optimization of native cloud functionalities.

Required Experience and Skills

• Minimum of 10 years in cybersecurity architecture and engineering within complex ICT settings.
• Proven track record in designing and deploying security architectures for extensive AWS setups.
• In-depth expertise in AWS security services including IAM, AWS Organizations, Control Tower, Security Hub, GuardDuty, Inspector, CloudTrail, CloudWatch, AWS Config, KMS, Secrets Manager, and AWS WAF.
• Robust comprehension of AWS multi-account structures, landing zones, organisational units, Service Control Policies, and governance frameworks.
• Proficient with identity management, network segmentation, encryption methods, key management, workload protection, and data security controls.
• Applied knowledge of security best practices such as least privilege, defence in depth, Zero Trust, and secure-by-design principles.
• Experienced in applying cloud security assessments, architecture reviews, threat modelling, and risk analysis.
• Familiar with containers, serverless architectures, APIs, DevSecOps methodologies, CI/CD pipelines, and securing Infrastructure as Code.
• Strong background in enterprise security architecture, identity and access administration, vulnerability and risk management.
• Excellent communication, stakeholder engagement, analytical thinking, documentation, and presentation capabilities.

Desirable Qualifications

• Experience crafting hybrid or multi-cloud security frameworks integrating AWS, Microsoft Azure, and on-premises systems.
• Cloud and cybersecurity certifications such as AWS Certified Security or AWS Solutions Architect.
• Familiarity with Infrastructure as Code, DevSecOps, and cloud security posture tools.
• Knowledge of automating security controls and maintaining continuous compliance.

Additional Information

• Applicants must hold Australian citizenship.
• Candidates should currently reside in Brisbane, Queensland, Australia.