> Markdown version of [/jobs/ext/2838255-enterprise-architect-end-of-life-threat-detection](https://www.wearedevelopers.com/jobs/ext/2838255-enterprise-architect-end-of-life-threat-detection). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Enterprise Architect - End of Life - Threat Detection - **Company:** Square One Resources Limited - **Location:** London, UK - **Salary:** £169,000.0 - £176,800.0 - **Contract:** Temporary contract - **Skills:** Active Directory, Amazon Web Services, Microsoft Azure, Cloud Computing, Data Centers, Identity and Access Management, IT Management, Intrusion Detection and Prevention, Microsoft Visio, OpenShift, Ansible, Scaled Agile Framework, Zachman Framework, Google Cloud, Cloud Platform System, Cyberark, IT Architecture, Multi-Cloud, Archimate, Technical Debt, HybridCloud, Togaf, Kubernetes, Cloud Migration, Interactive Whiteboards, Terraform - **Published:** September 11, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5878556790 ## About the Role 1. Hybrid & Multi-Cloud Architecture * Extensive experience designing, deploying, and migrating applications across hybrid environments (On-Premises to Public Cloud: AWS, Azure, or GCP). * Strong grasp of container orchestration (Kubernetes, OpenShift) and Infrastructure as Code (Terraform, Ansible) to ensure consistency across cloud environments. * Proven track record of managing large-scale infrastructure decommissioning, hardware refreshes, and legacy system modernization. 2. FinOps & Financial Modeling * Deep familiarity with the FinOps Framework (Inform, Optimize, Operate phases) and cloud cost management tooling (e.g., AWS Cost Explorer, Azure Cost Management, CloudHealth, Kubecost). * Capability to design architectures optimized for cost efficiency, incorporating spot instances, savings plans, auto-scaling parameters, and data egress optimization. * Strong capability to calculate TCO and ROI comparison models, guiding the team to select the most cost-effective cloud or hybrid landing zones for migrating EOL systems. 3. Identity & Cyber Resilience (ITDR Focus) * Advanced architectural knowledge of hybrid Identity & Access Management (IAM) ecosystems, including Active Directory tiering models, Entra ID, and PAM solutions (CyberArk, BeyondTrust). * Understanding of identity threat vectors and security posture assessment tools designed to detect privilege escalation, lateral movement, and misconfigurations. Leadership & Strategy Capabilities * Financial & Technical Diplomat: Able to effectively bridge the gap between Enterprise IT Engineering, Finance (CFO office), and Procurement to drive cultural accountability around cloud spend. * Risk-Aware Decision Maker: Competent at balancing the urgency of security remediation (ITDR) and EOL risk management against immediate financial constraints and operational SLAs. * Architectural Communicator: Expert visual modeler (Miro, Visio, ArchiMate) capable of distilling complex infrastructure topologies and financial metrics into clear executive roadmaps., * Experience: Experience with Enterprise, Cloud, or Infrastructure Architecture leadership role driving large hybrid cloud transformations. * Certifications (Highly Regarded): + FinOps Certified Practitioner or FinOps Certified Enterprise Architect. + TOGAF, Zachman, or SAFe framework certifications. + Professional Cloud Architect certifications (e.g., AWS Certified Solutions Architect Pro, Azure Solutions Architect Expert, Google Cloud Professional Cloud Architect). ## Description Crucially, this leader will blend deep infrastructure engineering with financial discipline, embedding FinOps frameworks across our cloud and on-premise environments. You will ensure that every milestone on our strategic roadmap optimizes unit economics, eliminates waste during EOL migrations, and remains tightly aligned with corporate fiscal and security goals., * Architect the target-state vision for a highly resilient hybrid environment, seamlessly blending on-premise data centers with multi-cloud architectures (AWS, Azure, GCP). * Build & Govern the Strategic Roadmap: Design and maintain a phased, multi-year technology lifecycle roadmap tracking infrastructure dependencies, technical debt, and aggressive EOL asset mitigation. * Drive FinOps & Cost Optimization: Establish cloud financial accountability by embedding FinOps practices into the architecture lifecycle. Manage cloud spend, model TCO (Total Cost of Ownership) for EOL re-platforming options, and eliminate legacy waste. * Champion ITDR Remediation: Provide primary technical and architectural governance for the Identity Threat Detection and Response program. Harden hybrid identity environments across Active Directory and cloud IDPs (Entra ID). * Guide & Influence Engineering Teams: Act as the ultimate technical bridge across diverse infrastructure silos (Compute, Storage, Network, IAM, Cloud). Confidently guide engineering execution toward compliant, budget-aware target states. ## Related Videos - [Building Well-Architected applications](https://www.wearedevelopers.com/videos/691-building-well-architected-applications) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [We adopted DevOps and are Cloud-native, Now What?](https://www.wearedevelopers.com/videos/485-we-adopted-devops-and-are-cloud-native-now-what) - [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation) - [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Geometry of Incidents: Connecting User Impact to Architecture](https://www.wearedevelopers.com/magazine/764-the-geometry-of-incidents-connecting-user-impact-to-architecture)