> Markdown version of [/jobs/ext/4712861-cloud-security-architect-security-assessments](https://www.wearedevelopers.com/jobs/ext/4712861-cloud-security-architect-security-assessments). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Architect (security assessments) - **Company:** NTT DATA - **Location:** United Kingdom - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Microsoft Access, Amazon Web Services, Software System Penetration Testing, Computing Platforms, Microsoft Azure, Remote Backup Services, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Database, Cloud Engineering, Cyber Security, Data Transmissions, DevOps, Disaster Recovery, Multi-Factor Authentication, Federated Identity Management, Infrastructure as a Service (IaaS), Identity and Access Management, Information Systems Security Architecture Professional, Key Management, Platform as a Service (PAAS), Azure Active Directory, Cloud Services, Security Software, Single Sign-On, Strategies of Testing, Software Vulnerability Management, Policy as Code, Data Logging, Google Cloud, Cloud Platform System, Data Classification, Delivery Pipeline, Multi-Cloud, HybridCloud, Infrastructure as Code (IaC), Cloudformation, National Institute of Standards and Technology Cybersecurity Framework, SC Clearance, Containerization, Kubernetes, Information Technology, CIS Benchmarks, Terraform, Devsecops, Serverless Computing, Azure Resource Manager, Vulnerability Analysis, Microservices - **Published:** November 14, 2026 - **Apply:** https://www.apply4u.co.uk/jobs/cloud-security-architect-security-assessments/56427481 ## About the Role Advanced Cloud Security Expertise Mastery of cloud security across AWS, Azure, and GCP platforms Expert knowledge of cloud security frameworks (CSA CCM, NIST SP 800-53, CIS Benchmarks) Advanced experience in cloud security architecture review and validation Deep understanding of cloud-native security services and CSPM tools Comprehensive knowledge of container security, Kubernetes, and serverless security Cloud Platform Technical Skills AWS Security: Security Hub, GuardDuty, IAM Access Analyzer, KMS, CloudTrail, Config GCP Security: Security Command Center, Cloud Armor, IAM, Cloud KMS, Logging IaC security: Terraform, CloudFormation, ARM templates, policy as code frameworks Assessment and Testing Methodologies Cloud security assessment frameworks and methodologies Cloud penetration testing tools and techniques (Pacu, ScoutSuite, Prowler, CloudMapper) Threat modeling for cloud architectures (STRIDE, PASTA) Security control validation and effectiveness testing Vulnerability assessment and remediation prioritization Professional Skills Senior-level communication and presentation capabilities to technical and business stakeholders Advanced facilitation skills for cloud security architecture reviews Strategic thinking and cloud security roadmap development Cross-functional collaboration with DevOps, Platform Engineering, and Cloud CoE teams Client consulting and advisory skills for cloud transformation programs Certifications Required CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Professional) - Mandatory Cloud platform security certification: AWS Security Specialty, Azure Security Engineer, or GCP Professional Cloud Security Engineer - Required CREST CRT or CCT (Cloud/Infrastructure) or equivalent penetration testing certification - Required Kubernetes security certification (CKS, CKAD) - Preferred Eligible: UK SC security clearance Education Bachelor's degree in Computer Science, Information Security, Cybersecurity, or related field Master's degree in relevant discipline preferred Advanced professional certifications in cloud security and assurance Experience 6+ years of progressive experience in information security with focus on cloud security 3+ years conducting cloud security assessments and architecture reviews Proven track record delivering cloud security assurance engagements for enterprise clients Experience across multiple cloud platforms (AWS, Azure, GCP) in production environments Hands-on experience with cloud security tools, CSPM, and cloud penetration testing Strategic Responsibilities Cloud security assessment program delivery and quality assurance Cloud security methodology development and continuous improvement Client advisory on cloud security transformation initiatives Advanced Professional Requirements CISSP or CCSP demonstrating strategic cloud security leadership AWS Security Specialty, Azure Security Engineer, or GCP Professional Cloud Security Engineer for platform expertise CREST CRT/CCT for recognized penetration testing authority Continuous professional development in emerging cloud security technologies ## Description Cloud Security Architecture Assurance Lead comprehensive security architecture reviews for cloud-native and hybrid cloud solutions Validate cloud security designs against industry frameworks including NIST CSF, CIS Benchmarks, and CSA CCM Assess cloud architecture patterns for IaaS, PaaS, SaaS, and containerized workloads Provide authoritative guidance on secure multi-cloud and hybrid cloud architectures Evaluate cloud migration security strategies and transformation roadmaps Interface with cloud architects and enterprise architecture teams on security requirements Cloud Security Assessment and Testing Design and execute cloud security assessments across AWS, Azure, and GCP environments Conduct cloud configuration reviews and security posture assessments Lead cloud penetration testing engagements following CREST and CHECK methodologies Perform container and Kubernetes security assessments Assess serverless and microservices security implementations Validate Infrastructure as Code (IaC) security controls and deployment pipelines Cloud Compliance and Governance Lead cloud compliance assessments against ISO 27017, ISO 27018, and SOC 2 requirements Conduct cloud security audits for regulatory frameworks including GDPR, NIS2, and DORA Assess cloud service provider security controls and shared responsibility models Validate cloud governance frameworks and policy enforcement mechanisms Review cloud security posture management (CSPM) implementations Coordinate cloud security audits with internal and external audit teams Cloud Identity and Access Management Assurance Assess cloud IAM architectures including Azure AD, AWS IAM, and GCP IAM Validate privileged access management and just-in-time access controls Review federated identity, SSO, and multi-factor authentication implementations Assess service account security and workload identity configurations Evaluate cloud entitlement management and least privilege implementations Validate identity governance and administration controls Cloud Data Protection and Encryption Assurance Assess cloud data protection strategies including encryption at rest and in transit Validate cloud key management service implementations and BYOK configurations Review data residency, sovereignty, and cross-border data transfer controls Assess cloud backup, disaster recovery, and business continuity arrangements Validate data classification and cloud DLP implementations Review cloud database security and secrets management solutions DevSecOps and Cloud Pipeline Security Assess security integration in cloud CI/CD pipelines and DevOps workflows Validate shift-left security practices and automated security testing Review Infrastructure as Code security scanning and policy as code implementations Assess container image security and registry vulnerability management Evaluate cloud workload protection platforms and runtime security controls Validate secure software supply chain practices for cloud deployments, We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team.