Cloud Security Architect

. Design secure Cloud architectures in Microsoft Azure or Amazon AWS .

Posted 10/26/2026full-timeKatowice • PolandMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing secure Cloud architectures using Microsoft Azure or Amazon AWS, with a strong focus on Cloud security, Infrastructure as Code, and DevSecOps practices. Proven ability to lead migration initiatives and mentor engineering teams while ensuring compliance with cybersecurity frameworks and standards.

Highest-signal resume keywords

Cloud Architecture DesignCloud Security ExpertiseInfrastructure as Code (Terraform, Bicep, ARM)DevSecOps PracticesCybersecurity Frameworks (NIST, CIS, ISO 27001)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Architecture DesignCloud Security ExpertiseInfrastructure as Code (Terraform, Bicep, ARM)DevSecOps PracticesCloud MigrationNetwork SegregationSecurity MonitoringThreat ModelingZero Trust ArchitectureCloud Governance

Soft Skills

MentoringCollaborationLeadershipCommunicationProblem-Solving

Tools & Technologies

Microsoft AzureAmazon AWSAzure DevOpsKubernetesAzure FunctionsGitHub Advanced SecurityAI Tools (Copilot, Claude, ChatGPT)Azure PoliciesSCPsOPA Policies

Certifications & Qualifications

Bachelor’s Degree in IT, Computer Science, Cybersecurity, or related fieldC1 / CAE Certification (preferred)

Industry Keywords

Cloud SecurityCybersecurity FrameworksGDPRComplianceAudit RequirementsCloud TransformationEnterprise Digital ServicesCloud Landing ZonesSecurity BaselinesIncident Response

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityFirewallsKubernetesTerraform

About the role

Key responsibilities & impact

Design secure Cloud architectures in Microsoft Azure or Amazon AWS
Lead and support migration initiatives from on-premises environments to Cloud
Establish modern CI/CD practices, including repository governance, branching strategies, pull request workflows, automated testing, release controls, and deployment approvals
Define and maintain Infrastructure as Code standards using Terraform, Bicep, or ARM
Partner with engineering teams to deliver reusable templates, secure pipelines, and reference Cloud architecture
Conduct architecture and design reviews, identify risks, and recommend secure, scalable, and maintainable solutions
Collaborate with Cloud, security, AI, data, quality engineering, compliance, and product teams
Mentor engineers and promote engineering best practices across cloud, security, DevOps, and infrastructure domains
Liaise with cyber leadership to review and implement security requirements across cloud platforms
Enforce security baselines, benchmarks, and standards across critical cloud infrastructure
Manage custom cloud infrastructure lifecycle
Help define and implement next-generation secure Cloud platforms, data-driven solutions, and enterprise digital services
Drive Cloud infrastructure and software delivery platform modernization initiatives

Requirements

What you’ll need

Bachelor’s Degree in IT, Computer Science, Computer Engineering, Cybersecurity, Information Systems, or a relevant discipline
At least 3 years of experience designing solutions in Microsoft Azure or Amazon AWS Cloud
Strong Cloud security expertise, including EntraID, RBAC, hardening, networking, encryption, secrets management, logging, and monitoring
Strong knowledge of network segregation, private endpoints, firewalls, virtual networks, controlled egress, and runtime isolation
Experience with Terraform, ARM, or Bicep for infrastructure provisioning and Cloud architecture enablement
Experience with Azure Policies, SCPs, and OPA policies
Experience with containers, Kubernetes, Azure Container Apps, Azure Functions, or similar runtime platforms
Experience with Azure DevOps, GitHub Advanced Security, code scanning, secret scanning, dependency scanning, or policy-as-code
Understanding of secure software delivery, release controls, traceability, and audit-ready engineering practices
Ability to work hands-on with engineers while setting architecture direction and technical standards
Fluent or native English required; C1 / CAE certification preferred
AI proficiency at business and personal level, including Copilot, Claude, and ChatGPT
Experience designing and implementing enterprise-scale Landing Zones in Azure or AWS environments
Strong understanding of Zero Trust architecture principles
Experience performing security architecture reviews, threat modeling, and cloud security risk assessments
Strong knowledge of cybersecurity frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, and GDPR
Experience implementing DevSecOps practices and integrating security controls throughout the software development lifecycle
Experience designing and securing multi-subscription or multi-account Cloud environments
Knowledge of cloud governance, guardrails, and security baseline implementation at enterprise scale
Experience with Cloud Landing Zone automation, platform engineering, and shared services architecture
Experience supporting audit, compliance, and regulatory requirements within Cloud environments
Demonstrated ability to drive Cloud transformation and modernization programs within large enterprise environments
Experience with security monitoring, incident response integration, and Cloud security operations practices

Benefits

Comp & perks

Continuous learning and development opportunities
Tools and flexibility to make a meaningful impact
Coaching and leadership development
Diverse and inclusive culture
Collaboration with global EY teams
Exposure to learning, skills, insights, and career opportunities across EY’s global delivery network