Cloud Architect – Security & Guardrails (AWS/Azure)

CAPCO POLAND

*We are looking for Poland based candidate.

ROLE OVERVIEW:

KEY RESPONSIBILITIES:

• Cloud Security Governance & Guardrails

  • Design, implement, and enforce security baselines and preventative guardrails across AWS and Azure environments.
  • Develop governance frameworks leveraging:
    • AWS Organizations
    • Service Control Policies (SCPs)
    • AWS Control Tower
    • Azure Policy
    • Azure Landing Zones
  • Ensure alignment with internal security standards, regulatory requirements, and industry best practices.

  SIEM, Monitoring & Logging Architecture

  • Design and optimize multi-cloud logging and monitoring strategies.
  • Build scalable telemetry pipelines integrating:
    • AWS CloudTrail
    • Amazon GuardDuty
    • Azure Activity Logs
    • Microsoft Defender for Cloud
  • Enable centralized visibility through enterprise SIEM platforms such as:
    • Microsoft Sentinel
    • Splunk
  • Support real-time threat detection, correlation, investigation, and alerting capabilities.

  Endpoint & Workload Protection

  • Define architecture and deployment strategies for:
    • EDR/XDR solutions
    • Cloud Workload Protection Platforms (CWPP)
  • Secure virtual machines, containers, Kubernetes environments, and serverless workloads across cloud platforms.
  • Collaborate with Security Operations teams to enhance threat detection and response.

  Vulnerability & Security Posture Management

  • Implement and optimize Cloud Security Posture Management (CSPM) capabilities.
  • Establish enterprise vulnerability management processes across cloud assets.
  • Enable continuous security scanning for:
    • Cloud misconfigurations
    • Infrastructure vulnerabilities
    • Container images
    • Operating systems
  • Develop automated remediation workflows and security playbooks.

  Identity & Access Security

  • Design and enforce Zero-Trust security principles.
  • Strengthen Identity and Access Management (IAM) governance across cloud platforms.
  • Implement:
    • Just-In-Time (JIT) access
    • Privileged Access Management (PAM)
    • Role-Based Access Control (RBAC)
    • Federated identity solutions
  • Partner with security stakeholders to reduce privileged access risks.

  Security Technology Integration

  • Evaluate, deploy, and govern best-in-class cloud security technologies.
  • Integrate third-party security platforms including:
    • CyberArk
    • Wiz
    • Palo Alto Prisma Cloud
    • CrowdStrike
    • Other strategic security tooling
  • Drive consistent security controls and operational excellence across the cloud ecosystem.

REQUIRED QUALIFICATIONS:

• Extensive experience designing and securing enterprise-scale AWS and Azure environments.Deep knowledge of cloud-native security services, controls, and governance frameworks.Hands-on expertise with:

  • SIEM platforms
  • EDR/XDR technologies
  • Vulnerability management solutions
  • CSPM tools

  Strong experience implementing:

  • Azure Policy
  • AWS Control Tower
  • Service Control Policies (SCPs)
  • Cloud governance frameworks

  Advanced Infrastructure as Code (IaC) skills, particularly with Terraform.Experience embedding security controls into CI/CD and cloud deployment pipelines.Strong understanding of:

  • Modern cyber threats
  • MITRE ATT&CK framework
  • Cloud attack vectors
  • Security monitoring and incident response processes

  Proven ability to collaborate effectively with:

  • Cloud Engineering teams
  • Security Operations Centers (SOC)
  • Risk, Compliance, and Audit functions

  Excellent stakeholder management and communication skills.
  
  
  

We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on diverse projects.

Recruitment Process:

1. HR Interview with the recruiter
2. Technical Interview
3. Client Interview
4. Feedback and offer

#LI-HYBRID