Key Responsibilities

- Establish and evolve cloud security standards, governance models, reference architectures, and security guardrails across AWS and Azure environments.
- Develop repeatable architecture patterns and security blueprints to support cloud-native deployments.
- Translate business and technical objectives into security requirements for cloud services and platforms.
- Architect secure cloud solutions covering areas such as identity and access management, network segmentation, encryption, key lifecycle management, monitoring, logging, container platforms, Kubernetes, and DevSecOps practices.
- Assess solution architectures to identify vulnerabilities, security exposures, and compliance gaps.
- Lead and facilitate threat modelling exercises and cloud-focused security assessments.
- Recommend mitigation strategies and contribute to formal risk treatment and acceptance processes.
- Support architecture governance forums and technical review boards.
- Partner with security operations and engineering teams to strengthen monitoring, detection, and incident response capabilities within cloud environments.
- Advocate for secure engineering practices and drive adoption of Security-by-Design principles throughout the organisation.

Required Experience

- Minimum 10 years' experience across IT infrastructure, cybersecurity, or security architecture disciplines.
- At least 5 years specialising in Cloud Security Architecture, with hands-on design and implementation expertise.




- Demonstrated experience applying and operating cloud security control frameworks.
- Strong background designing and securing AWS-based cloud environments.
- Experience creating cloud security standards, reusable design patterns, and architectural frameworks within AWS. Exposure to Azure is beneficial.
- Proven capability conducting security risk assessments and threat modelling activities.
- Experience reviewing solution designs from a security architecture perspective and providing remediation recommendations.

Strong practical knowledge of:

- AWS Identity & Access Management (IAM)
- Cloud Network Security, including VPCs, Transit Gateway, Security Groups, and Network ACLs
- Container and Kubernetes Security, particularly EKS and ECS
- Infrastructure as Code (IaC) using Terraform and CloudFormation
- Cryptography, Encryption, and Secrets Management
- Security monitoring, logging, alerting, and detection mechanisms
- Security automation and DevSecOps tooling
- AWS-native security services including GuardDuty, Security Hub, Inspector, WAF, and KMS

Additional Requirements

- Good understanding of recognised security and compliance frameworks, including NIS2, ISO 27001, CIS Controls.
- Strong stakeholder engagement and communication skills with the ability to influence both technical and non-technical audiences.
- Fluent English communication skills, both written and verbal.
- Knowledge of Dutch and/or French would be advantageous.
- AWS Certified Security certification is highly desirable.

📌 Cloud security architect (España)
🏢 Parallel Consulting
📍 España