Cloud Security Architect

This is a hands-on security architecture opportunity within a large, regulated enterprise undergoing significant cloud and platform modernisation. The role is particularly suited to a Senior Cloud Engineer, Cloud Security Engineer or Cloud Architect who has recently moved into architecture. You will remain close to delivery, partnering directly with cloud, platform and infrastructure teams to translate security requirements into practical patterns, reusable guardrails and secure-by-default capabilities. Strong GCP experience will be highly relevant, supported by exposure to AWS and Azure environments. Key Responsibilities Embed within cloud, platform and infrastructure delivery teams to ensure new services and workloads are secure by design. Define cloud foundation security patterns covering landing zones, organisational structures, identity, logging and policy controls. Produce reusable reference architectures, standards, architecture decision records and implementation guardrails. Develop secure patterns for Kubernetes, containerised workloads, serverless services, workload identities, secrets and hardened images. Integrate security controls into Terraform, infrastructure-as-code, CI/CD pipelines and policy-as-code frameworks. Provide practical guidance across database security, cloud security posture, AI-enabled services and technical risk decisions. Must-Have Experience Strong hands-on background in cloud engineering, cloud security engineering or cloud architecture, with recent ownership of architecture or technical design decisions. Deep experience with GCP cloud foundations, supported by working knowledge of AWS or Azure security environments. Practical experience with Terraform, infrastructure-as-code and automated security control enforcement. Experience securing Kubernetes, containers, serverless platforms or other cloud-native workload environments. Strong understanding of cloud identity, workload identities, secrets management, logging and cloud security controls. Ability to work directly with engineers while producing clear architecture diagrams, standards, guardrails and stakeholder recommendations. Nice-to-Have Experience CNAPP, cloud security posture management or cloud vulnerability governance platforms. GitHub Advanced Security, GitHub Actions or DevSecOps pipeline security. Database security, including encryption, key management, masking and private connectivity. Security architecture for AI-enabled, isolated or untrusted workloads. OpenTelemetry, security observability or SIEM integration. CCSP, CISSP, SABSA or relevant cloud security certifications. What's on Offer Initial six-month contract with potential for extension. Melbourne CBD location with hybrid working arrangements. Hands-on architecture role that remains closely aligned with engineering delivery. Broad remit across cloud foundations, platform engineering, databases and emerging technologies. Opportunity to establish reusable security patterns adopted across multiple delivery teams. Collaborative enterprise environment with significant investment in cloud and security capability.

#J-18808-Ljbffr