Cloud & Container Security Architect

Working within one of our leading financial institutions, this role calls for a Cloud & Container Security Architect who will play a pivotal part in defining cloud security standards, reviewing engineering designs, and integrating security best practices into CI/CD pipelines. The successful candidate will combine strong technical expertise, architectural thinking, and communication skills to build resilient and compliant cloud infrastructures that enable innovation while mitigating risk.

Responsibilities

• Analyze and review cloud architecture diagrams to identify security risks and ensure secure design practices for public cloud and container platforms.
• Define and develop security standards, controls, and guidelines for secure deployment and operation of public cloud services and containerized applications.
• Provide governance and oversight for CI/CD pipeline development to ensure secure code and image deployment.
• Establish and maintain security controls for Azure and GCP services, including Cloud SQL, BigQuery, AKS, and GKE.
• Review engineering designs to ensure alignment with internal security standards and industry best practices.
• Oversee end-to-end governance for public cloud infrastructure deployment, integration, and security controls with a focus on containerized platforms.
• Collaborate with DevOps, engineering, and cross-functional teams to embed security practices and tools into development workflows.
• Develop security reporting metrics (KRIs, KPIs) to demonstrate the effectiveness of implemented security controls.
• Partner with First and Second Line of Defense teams to ensure compliance with established security frameworks and policies.

Desired Skill Set

• Hands‑on experience with Microsoft Azure and/or Google Cloud Platform (GCP).
• Strong engineering or architecture background, including solution design and build.
• Expertise in infrastructure integration, connecting multi‑cloud and on‑prem environments.
• Exceptional communication and documentation skills, with the ability to convey complex concepts to technical and non‑technical audiences.
• Highly collaborative team player with a proactive and detail‑oriented approach.
• Strong analytical and problem‑solving abilities, with a focus on delivering secure, scalable solutions.

Nice‑to‑Have

• Prior experience working in banking or financial institutions.
• Hands‑on knowledge of container platforms such as Azure Kubernetes Service (AKS) and Google Kubernetes Engine (GKE).
• Deep understanding of cloud security frameworks, compliance standards, and best practices.

Equal Opportunity Statement

BeachHead is an equal opportunity agency and employer. We advocate for you and welcome anyone regardless of race, color, religion, national origin, sex, physical or mental disability, or age.