Cloud Security Architect-Cloud & Platform Engineering
Core
Ensures continuity and maturity of Cloud Security and CNAPP architecture, including CSPM, CIEM, CWPP, and IaC controls, to secure the bank's cloud platforms.
Role type
Senior Cloud Security Architect
Builds
Multi-cloud and hybrid security solutions, security reference architectures, and reusable patterns for engineering adoption.
Domain
Banking / Cloud Security / Platform Engineering
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Cloud security architecture (GCP, Azure, AWS), CNAPP capabilities (CSPM, CWPP, CIEM, IaC scanning), DevSecOps integration (CI/CD pipelines), cryptography, IAM, data protection, network architecture, NIST/CIS frameworks, cloud-native workload security (Kubernetes), security toolchain integrations.
Preferred skills
Agentic AI applications experience.
Technologies
Terraform Cloud, GitHub Actions, Azure DevOps, OPA, GKE, AKS, EKS, CNAPP, SSPM, SAST, DAST.
Responsibilities
Lead CNAPP architecture and rollout across multi-cloud/hybrid solutions; Design multi-cloud security solutions covering data protection, IAM, and threat management; Define security controls via policy as Code and integrate scanning into CI/CD; Publish Security Reference Architectures and reusable patterns; Own cloud security architecture artifacts and communicate state to stakeholders; Provide advisory and architecture reviews to identify gaps and recommend remediation; Support audit and compliance evidence through control documentation and traceability to NIST/CSA/CIS.
Seniority
Senior, hands-on IC
