Cloud Security Architect

Salary: £44,000 - 84,000 per year

Requirements:

• Bachelors or Masters degree in Cyber Security, Computer Science, Physics with Computing, or a related discipline; an MSc or equivalent postgraduate qualification is advantageous
• Proven experience in a Cloud Security Architect or Senior Security Consultant role
• AWS Certified Security – Specialty (required); CISSP, CRISC, or CCSP strongly preferred. ISO 27001 Lead Implementer/Auditor, Azure Security Engineer, or GCP Security Engineer certifications are advantageous
• Hands-on experience securing workloads on AWS and/or Microsoft Azure; GCP experience is beneficial
• Track record of delivering security architecture within financial services and/or public sector environments
• Experience supporting or achieving ISO 27001 and/or Cyber Essentials Plus accreditation
• Practical experience with Infrastructure as Code (e.g. Terraform) and secure CI/CD pipeline design, alongside a background in application security, DevSecOps, or secure software engineering
• Strong knowledge of network protocols including TCP/IP, DNS, VPN, and IPSEC, with experience working in scaled agile environments
• Excellent stakeholder engagement skills, including communicating security risks clearly to senior and executive audiences and building trusted client relationships
• Analytical and pragmatic mindset, with experience mentoring teams, contributing to security communities, and enabling secure innovation while balancing commercial and operational priorities
• Must be eligible for UK Security Check clearance

Responsibilities:

• Design and own cloud security architecture across AWS, Azure, and/or GCP environments, including developing reference architectures and reusable solution patterns
• Define and author enterprise-level security policies, controls frameworks, and governance documentation aligned to industry standards
• Lead cloud platform and SaaS risk assessments, threat modelling exercises, and security posture evaluations, using methodologies such as FAIR
• Drive compliance programmes covering ISO 27001, Cyber Essentials Plus, PCI DSS, and other relevant regulatory frameworks
• Support DevSecOps adoption and integrate security tooling and controls into CI/CD pipelines across client delivery teams
• Engage senior stakeholders and executive teams through clear security risk reporting, remediation guidance, and strategic security roadmaps
• Lead or contribute to Security Champions communities of practice, fostering a security-aware engineering culture within client organisations
• Provide security assurance for software development and third-party supplier onboarding, including SSPM tooling and SaaS security reviews
• Architect secure identity solutions, including centralised and federated authentication models across complex, cross-domain environments
• Support incident response planning and business continuity activities, ensuring cloud-hosted services meet resilience and recovery objectives
• Contribute to FinOps activities from a cybersecurity cost and sustainability perspective, ensuring security investments are justified and efficiently allocated

Technologies:

• AWS
• Architect
• Azure
• CI/CD
• Cloud
• DevSecOps
• GCP
• Support
• Network
• Security
• TCP/IP
• Terraform
• VPN
• Embedded

More:

We are Spike Reply, the Reply Group company focused on cybersecurity and personal data protection. Our mission is to safeguard the values and privacy of people, companies, and processes and support a global, sustainable digital world through innovation. With our partners, we provide vendor-independent consulting to help enterprises build a group-wide, security-oriented culture, prioritising the confidentiality, integrity, and availability of systems. In this senior consulting role, you will join Replys growing cybersecurity practice, working with financial services and public sector organisations at the intersection of technology, risk, and business. We are committed to equal employment opportunities, diversity, and fair selection methods, and can consider reasonable adjustments during recruitment. The role is based in the United Kingdom.

last updated 40 week of 2026