Cloud Platform & Security Architect

Job Title:Cloud Platform & Security Architect
Location: London (2 days on-site per week)
Salary/Rate: £510 - 560 per day inside IR35
Start Date: 3-4 weeks
Job Type: Initial 3 month contract (scope to extend)

Company Introduction
We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled Cloud Platform & Security Architect to join our client in a Tier 1 Bank in London on a hybrid basis.

Job Responsibilities/Objectives
The Cloud Platform & Security Architect is responsible for defining and governing the architecture of FSCS cloud, hybrid infrastructure and security platforms. The role provides strategic and technical architectural leadership across Microsoft Azure, cloud platforms, networking, identity, security and resilience, ensuring technology solutions are secure, scalable, resilient, supportable and aligned with FSCS technology strategy and architectural principles.

Cloud Platform Architecture

- Define and maintain target-state architecture for Microsoft Azure, cloud and hybrid technology platforms.
- Define reference architectures and reusable patterns for Azure landing zones, Management Groups, subscriptions, networking, identity, compute, storage, monitoring and governance.
- Establish architectural principles and guardrails covering Azure Policy, RBAC, PIM, private connectivity, resource organisation, logging and platform governance.
- Define architecture patterns that enable scalable, secure and consistent technology delivery across FSCS.
- Provide architectural direction for cloud migration, modernisation and re-platforming initiatives.
- Assess new Azure services and cloud technologies and provide recommendations for their adoption.
- Ensure cloud architecture balances security, resilience, scalability, performance, operational supportability and cost efficiency.
- Define architectural direction for Infrastructure as Code and automated cloud provisioning, including Terraform and Azure DevOps.

Hybrid Infrastructure Architecture
- Define target-state architecture for FSCS hybrid infrastructure and its integration with Microsoft Azure.
- Define target-state architectural patterns and standards for core infrastructure services, including technologies such as Active Directory, Entra ID, DNS, DHCP and PKI.
- Provide architectural direction for compute, virtualisation, storage and associated platform technologies.
- Define secure and resilient integration patterns between cloud, on-premises and third-party environments.
- Develop architecture roadmaps supporting infrastructure modernisation and reduction of legacy technology.
- Identify architectural dependencies, constraints and technical debt associated with hybrid infrastructure.

Network & Connectivity Architecture
- Define target-state network architecture across cloud and hybrid environments.
- Define reference architectures and patterns for Azure networking, routing, segmentation, firewalls, private connectivity, VPN, load balancing and application delivery.
- Define network architecture aligned with FSCS Zero Trust principles and security requirements.
- Provide architectural direction across Azure networking, Cisco technologies, Zscaler and associated network and security platforms.
- Define secure connectivity patterns between Azure, on-premises infrastructure, SaaS services, third parties and external services.
- Establish architecture standards and principles for network resilience, segmentation, availability and secure connectivity.

Security Architecture & Technical Controls
- Define cloud platform and infrastructure security architecture aligned with FSCS security policies, enterprise architecture principles and regulatory requirements.
- Define security architecture patterns and technical guardrails across cloud, identity, network and infrastructure platforms.
- Provide architectural direction for Microsoft Defender, Sentinel and associated Microsoft security technologies.
- Define identity architecture covering Entra ID, Conditional Access, PIM, RBAC, MFA, SSO, managed identities and workload identities.
- Define architectural patterns for Azure Firewall, WAF, DDoS Protection, Key Vault, encryption, certificates and secrets management.
- Define architecture patterns aligned with Zero Trust principles across identity, networks, applications and cloud platforms.
- Ensure security, vulnerability management, hardening, logging and monitoring requirements are incorporated into reference architectures and solution designs.
- Work closely with Information and Cyber Security to ensure platform architectures align with security policies, standards and risk requirements.

Resilience, Backup & Disaster Recovery
- Define architecture principles and patterns for availability, resilience, backup, recovery and disaster recovery.
- Define appropriate resilience and redundancy patterns for critical cloud and hybrid platforms.
- Ensure architecture supports agreed recovery objectives and operational resilience requirements.
- Define reference architectures for backup, replication, failover and recovery capabilities.
- Identify architectural risks and single points of failure and recommend appropriate design improvements.

Architecture Governance & Design Authority
- Act as a key member of the Technology Design Authority and relevant architecture governance forums.
- Define and maintain cloud platform, infrastructure and security architecture principles, standards, reference architectures and patterns.
- Provide architectural review and design assurance for technology solutions and major changes.
- Ensure proposed solutions align with enterprise architecture, technology strategy, security requirements and approved architecture standards.

Required Skills/Experience
The ideal candidate will have the following:
- CCSP, CISSP, or equivalent industry-recognised cloud/security certification.
- Strong knowledge of Microsoft Azure architecture across networking, identity, security, compute, storage, monitoring and governance.
- Strong knowledge of Azure landing zones, Management Groups, Azure Policy, RBAC, PIM and cloud governance.
- Strong enterprise networking and security knowledge, including routing, segmentation, firewalls, VPNs and private connectivity.
- Advanced knowledge of Active Directory, Entra ID, Conditional Access, MFA, PIM, SSO, certificates and authentication technologies.
- Strong understanding of Microsoft Defender, Sentinel, Zero Trust and cloud security architecture.
- Strong understanding of hybrid infrastructure, resilience, backup and disaster recovery architecture.
- Good practical understanding of Infrastructure as Code, including Terraform, Azure DevOps and automated cloud deployment.
- Strong knowledge of architecture governance, design assurance, reference architectures and technical standards.

If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format.

Disclaimer
Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.
Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.