Senior Consultant - Cloud Security Architect

Role Overview

We are seeking a Senior Consultant specializing as a Cloud Security Architect to deliver exceptional client engagements by understanding their business challenges, cloud strategies, regulatory demands, and evolving security threats. This role involves advising on secure cloud adoption, designing landing zone security, and supporting multi-cloud security architectures.

Key Responsibilities

• Evaluate clients' business problems, cloud ambitions, regulatory frameworks, and threat landscapes to provide tailored security advice.
• Advise on secure migration strategies, including lift-and-shift and landing zone security design.
• Design and implement comprehensive security controls across Azure landing zones, covering identity, networking, governance, encryption, workload protection, logging, and monitoring.
• Provide security architecture support spanning Azure, Microsoft 365, AWS, and OCI environments.
• Guide clients through compliance with cybersecurity regulations and cloud security frameworks.
• Develop cloud security governance, operating models, control frameworks, and risk management plans.
• Assess existing cloud setups versus security benchmarks like CIS, NIST, ISO, CAF, and cloud provider best practices.
• Enhance clients’ security controls across multiple cloud architecture layers.
• Leverage security architecture to aid broader security transformation initiatives.
• Develop and automate security controls, posture reporting, and risk dashboards.
• Lead small-to-medium projects independently and contribute significantly in large transformation programs.
• Support presales efforts, proposal preparations, and business development endeavors.
• Build trusted relationships with clients at both technical and executive levels.
• Uphold standards of quality, integrity, and risk management, serving as a trusted advisor and role model.
• Contribute to the ongoing enhancement of the firm's cloud security services and professional community.

Candidate Profile

• Demonstrated expertise in cloud security architecture and consulting with hands-on Microsoft Azure and Microsoft 365 experience.
• Practical knowledge of secure cloud migrations, lift-and-shift processes, and Azure landing zone implementations.
• Deep understanding of Azure landing zone security components including management groups, subscriptions, role-based access control, Azure Policy, Defender for Cloud, logging, network security, private endpoints, Key Vault, backups, and workload safeguards.
• Experience in designing and implementing security controls across various IT architecture layers.
• Strong proficiency in Identity and Access Management with Microsoft Entra ID, Conditional Access, Privileged Identity Management, workload identities, and identity governance.
• Background in cloud security assessments, configuration reviews, privacy and regulatory risk assessment, and mapping to control frameworks.
• Familiarity with DevSecOps, infrastructure-as-code, policy-as-code, automation, and continuous security monitoring is highly desired.
• Experience delivering cybersecurity consulting in commercial environments.
• Work exposure to multiple cloud platforms including Microsoft Azure, AWS, OCI, and GCP.
• Analytical skills to dissect complex problems, pinpoint core issues, and propose sensible solutions.
• Strong communication skills tailored to both technical teams and senior stakeholders.
• Capability to convey complex cybersecurity subjects into understandable business risks, impacts, and remedial advice.
• Ability to maintain high performance standards under sustained pressure while preserving professionalism.
• Required prior experience with a Big 4 consulting firm.

Qualifications & Certifications

• Certified Microsoft Cybersecurity Architect Expert – SC-100
• Microsoft Cloud and AI Security Engineer Associate – SC-500
• Identity and Access Administrator Associate – SC-300
• Information Security Administrator Associate – SC-401
• Microsoft Azure Architecture/Administrator certifications like AZ-104 or AZ-305
• AWS Certified Security Specialty and AWS Solutions Architect Professional
• Google Cloud Professional Cloud Security Engineer
• CISSP, CISM, CCSP, or equivalent cybersecurity credentials
• SABSA, TOGAF, or related architecture certifications preferred