Cloud Security Ar

Cloud Security Architect

Location: Brisbane

Citizenship: Australian citizenship is mandatory

About the Opportunity

A leading technology consultancy is seeking an experienced Cloud Security Architect to support a complex enterprise cloud environment in Brisbane.

This senior role will focus on designing and maintaining secure AWS architectures, establishing reusable security controls and embedding security requirements throughout the cloud delivery lifecycle. You will work with cloud engineers, application teams, infrastructure specialists and security stakeholders to strengthen the organisation's cloud security posture.

Key Responsibilities

• Design and maintain secure AWS cloud architectures aligned with organisational standards, security policies and regulatory requirements.
• Develop security architecture across identity and access management, network security, encryption, data protection, logging and monitoring.
• Establish security guardrails and architectural patterns for AWS accounts, landing zones, network segmentation and multi-account environments.
• Provide security guidance for AWS infrastructure, applications, platforms and cloud-native services.
• Conduct architecture reviews, threat modelling and security risk assessments.
• Identify security control gaps and recommend appropriate remediation activities.
• Define secure configuration standards, reference architectures and reusable security controls.
• Support AWS-native security monitoring, configuration management, threat detection and vulnerability management.
• Provide security architecture guidance for cloud migration and transformation initiatives.
• Assist with security incident investigations and remediation from an architectural perspective.
• Develop security standards, procedures, risk assessments and technical design documentation.
• Improve cloud security through automation, enhanced governance and optimisation of cloud-native capabilities.

Required Skills and Experience

• At least 10 years of experience in cyber security architecture and engineering across complex ICT environments.
• Demonstrated experience designing and implementing security architectures for large-scale AWS environments.
• Strong knowledge of AWS security services and capabilities, including:
  • IAM
  • AWS Organizations
  • Control Tower
  • Security Hub
  • GuardDuty
  • Inspector
  • CloudTrail and CloudWatch
  • AWS Config
  • KMS and Secrets Manager
  • AWS WAF
• Strong understanding of AWS multi-account architecture, landing zones, organisational units, Service Control Policies and cloud governance.
• Experience designing identity, network segmentation, encryption, key management, workload protection and data security controls.
• Practical knowledge of least privilege, defence in depth, Zero Trust and secure-by-design principles.
• Experience conducting cloud security assessments, architectural reviews, threat modelling and risk assessments.
• Understanding of containers, serverless technologies, APIs, DevSecOps, CI/CD pipelines and Infrastructure as Code security.
• Strong knowledge of enterprise security architecture, identity and access management, vulnerability management and security risk management.
• Excellent stakeholder engagement, analytical, documentation, presentation and communication skills.

Desirable Experience

• Experience designing hybrid or multi-cloud security architectures integrating AWS, Microsoft Azure and on-premises infrastructure.
• AWS Certified Security, AWS Solutions Architect or other relevant cloud and cyber security certifications.
• Experience with Infrastructure as Code, DevSecOps and cloud security posture management.
• Knowledge of automated security controls and continuous compliance capabilities.

Mandatory Requirements

Applicants must:

• Be an Australian citizen.
• Currently reside in Brisbane.