75 Cloud Security jobs in London

Our client is a rapidly growing tech company looking for an experienced and visionary Lead Information Security Engineer specializing in Cloud Security to join their fully remote team. This role is critical in safeguarding our client's digital assets and ensuring the integrity and confidentiality of their data across all cloud environments (AWS, Azure, GCP). You will be responsible for designing, implementing, and managing robust cloud security strategies, policies, and solutions. This includes threat detection, incident response, vulnerability management, and compliance within cloud infrastructure. The ideal candidate will possess deep technical expertise in cloud security architecture, a strong understanding of current threat landscapes, and the ability to lead and mentor junior security professionals. You will champion security best practices and foster a security-conscious culture throughout the organization.

Key Responsibilities:

• Design, implement, and maintain comprehensive security controls and architectures for cloud platforms (AWS, Azure, GCP).
• Develop and enforce cloud security policies, standards, and procedures.
• Lead threat modeling and risk assessments for cloud deployments and services.
• Implement and manage security monitoring tools, SIEM, and intrusion detection/prevention systems.
• Develop and execute incident response plans for cloud security events.
• Conduct regular vulnerability assessments and penetration testing of cloud environments.
• Ensure compliance with relevant industry regulations and standards (e.g., GDPR, ISO 27001).
• Collaborate with DevOps and engineering teams to embed security throughout the software development lifecycle (DevSecOps).
• Provide technical leadership and mentorship to the information security team.
• Research emerging security threats and recommend proactive mitigation strategies.
• Automate security tasks and processes wherever possible.
• Stay up-to-date with the latest cloud security technologies and best practices.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred.
• Minimum of 8 years of progressive experience in information security, with at least 5 years focused on cloud security.
• Extensive hands-on experience with major cloud providers (AWS, Azure, GCP) and their security services.
• Strong understanding of network security, identity and access management (IAM), data encryption, and security compliance frameworks.
• Proficiency in scripting languages (e.g., Python, Bash) for automation.
• Experience with container security (e.g., Docker, Kubernetes) is a plus.
• Excellent analytical, problem-solving, and communication skills.
• Proven ability to lead security initiatives and mentor team members.
• Relevant security certifications such as CISSP, CCSP, AWS Certified Security – Specialty are highly advantageous.
• This is a 100% remote position, allowing you to work from anywhere. Regular virtual team meetings and collaboration will be expected.

Our client, a rapidly expanding FinTech firm, is seeking a highly skilled Senior Information Security Analyst with a strong specialization in Cloud Security to join their dedicated, fully remote security operations team. This role is critical in safeguarding our client's digital assets, cloud infrastructure, and sensitive data against evolving cyber threats. You will be responsible for designing, implementing, and managing robust security controls, conducting threat assessments, and responding to security incidents across multi-cloud environments (AWS, Azure, GCP).

Responsibilities:

• Develop, implement, and maintain security policies, standards, and procedures for cloud environments.
• Monitor cloud infrastructure for security vulnerabilities, threats, and incidents using SIEM, IDS/IPS, and other security tools.
• Conduct regular security assessments, penetration testing, and vulnerability scans of cloud applications and infrastructure.
• Respond to and manage security incidents, including investigation, containment, eradication, and recovery.
• Implement and manage identity and access management (IAM) solutions in cloud environments.
• Ensure compliance with relevant security regulations and standards (e.g., ISO 27001, SOC 2, GDPR).
• Collaborate with development and operations teams to embed security into the DevOps lifecycle (DevSecOps).
• Stay informed about the latest cloud security threats, vulnerabilities, and best practices.
• Develop and deliver security awareness training to employees.
• Automate security tasks and processes where possible to improve efficiency.
• Lead security architecture reviews for new cloud deployments and services.
• Contribute to the development of disaster recovery and business continuity plans.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 5+ years of experience in information security, with a significant focus on cloud security (AWS, Azure, or GCP).
• In-depth knowledge of cloud security principles, best practices, and common vulnerabilities.
• Hands-on experience with security tools such as SIEM, vulnerability scanners, firewalls, and IDS/IPS.
• Proficiency in scripting languages (e.g., Python, Bash) for automation is highly desirable.
• Strong understanding of network security, cryptography, and authentication protocols.
• Experience with incident response and forensics.
• Relevant security certifications (e.g., CISSP, CCSP, AWS Certified Security – Specialty) are a plus.
• Excellent analytical and problem-solving skills.
• Strong communication skills, capable of explaining complex security concepts to both technical and non-technical audiences in a remote setting.

This is an excellent opportunity for a seasoned security professional to play a key role in protecting a leading organization in the FinTech space, with the flexibility of a fully remote position.

Cloud Security Engineer

Kent – Hybrid

Competitive Salary

VIQU have partnered with a leading automotive organisation seeking a Cloud Security Engineer to join their growing security function. This role has been created to help bridge the gap between the cloud team and security, playing a crucial part in ensuring the organisation’s cloud environment remains secure and resilient.

As a Cloud Security Engineer, you’ll focus on securing cloud infrastructure, implementing best practices, and helping shape security processes to tackle current and emerging threats. You’ll work closely with both technical and non-technical teams, acting as a key point of contact between cloud and security disciplines.

Key Responsibilities of the Cloud Security Engineer:

• Ensure the security and integrity of cloud architecture by following and promoting security best practices.
• Identify and respond to security risks and incidents, offering practical, actionable solutions.
• Collaborate with internal teams across cloud, infrastructure, and security to ensure a cohesive approach.
• Stay ahead of emerging threats and adjust security posture accordingly.
• Communicate security risks, approaches, and resolutions to both technical teams and business stakeholders.

Key Requirements of the Cloud Security Engineer:

• Hands-on experience with AWS and a good understanding of cloud-native security principles.
• Experience working with Terraform as IaC.
• Previous exposure to cloud engineering/platform roles and Cloud Security Engineering positions
• Understanding of networking architecture, particularly within cloud environments.
• Familiarity with security frameworks such as ISO 27001, CIS, or NIST.
• Knowledge of system, technology, and product life cycles and how security fits within them.
• Strong communication and stakeholder management skills to operate across both technical and non-technical teams.
• Ability to independently troubleshoot issues and propose sound technical solutions.

To discuss this exciting opportunity in more detail, please APPLY NOW  for a no obligation chat with your VIQU Consultant. Additionally, you can contact Katie Dark  on (url removed)

If you know someone who would be ideal for this role, by way of showing our appreciation, VIQU is offering an introduction fee up to £1,000  once your referral has successfully started work with our client (terms apply).

To be the first to hear about other exciting opportunities, technology and recruitment news, please also follow us at ‘VIQU IT Recruitment’ on LinkedIn,  and Twitter: @VIQU_UK

Cloud Security Engineer

Kent – Hybrid

Competitive Salary

Avanade is looking for an experienced Cloud Security Architect to join our security practice. This is a client-facing role where you will be engaged in some of the most exciting, complex, and leading-edge projects. You will play an active role in transforming our client's Cyber Defence strategy, capabilities, and operations through the design and implementation of predominantly Microsoft Threat Protection technologies. You will also be part of the Avanade Security presales and Architecture function, creating proposals and solutions for our largest, most complex enterprise clients. This role will include partial delivery expectations for the year.
About the Role:
In this role, you will:
- Lead large projects and project teams.
- Manage deliverables and be responsible for delivering against critical milestones.
- Engage in solution architecture and pre-sales deal shaping.
- Develop and maintain long-term strategic client relationships.
- Design, implement, and integrate security, incident, and event management solutions into Security Operations, with a particular interest in Azure Sentinel.
- Understand threat modelling, risk, and how to mitigate risks concerning applications from internal and external threat actors.
- Have a deep understanding of incident response processes and techniques for cyber recovery.
- Understand security operations centres, their functions, and roles.
- Have a good understanding of the Microsoft platforms across Windows, Microsoft 365, and Azure.
- Understand techniques and approaches used by threat actors to compromise companies.
- Apply the MITRE ATT&CK framework to help customers improve their cyber defence.
- Understand the business, privacy, security, and compliance challenges surrounding client data and articulate the types of assets that would be seen as valuable and susceptible to attack.
- Be aware of emerging technologies in the Cyber Defence and cloud security space.
Your responsibilities may include :
- Develop and maintain strong relationships with the account teams and client stakeholders
- Identify customer needs and understand business goals to envisage a high-level solution and winning strategy.
- Develop detailed security transformation and operations opportunities based on the capabilities, standardised tools, processes and partner technology with the security architects and other technology partners.
- Drive and be involved in the proposal, solution presentations and discussions.
- Conduct and follow through the sales process to accomplish deal closure.
Requirements:
- Advanced Microsoft Security Certifications such as: SC-100, SC-200, SC-300, SC-400, SC-900.
- Industry-recognised certifications such as: CISSP, CCSP, CISM, SANS.
- In-depth Knowledge of Azure Security Tools: Have a key in-depth knowledge of Azure Security tools such as Security Copilot, Azure Sentinel, and Defender for Cloud to monitor, detect, and respond to security incidents. You will be responsible for configuring and managing these tools to ensure real-time threat detection and response.
- Security Architecture Design: Design and implement robust security architectures for cloud-based applications and services. Ensure compliance with industry standards and best practices.
- RFP Responses: Prepare and review responses to Requests for Proposals (RFPs) related to cloud security. Ensure that all security requirements are addressed and communicated to potential clients.
- Continuous Improvement: Stay updated on the latest security trends, technologies, and threats. Continuously improve security processes and tools to enhance the overall security posture.
- Strong knowledge of Azure Security tools, including Security Copilot, Azure Sentinel, and Azure Defender for Cloud.
- Experience with security incident management and response.
- Familiarity with industry standards and best practices for cloud security.
- Excellent communication and collaboration skills.
- Ability to lead RFP responses related to cloud security and Managed Security Services.
- Beneficial Knowledge: Familiarity with the Defender suite of products, including Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office 365, and Microsoft Cloud App Security.
- Certifications such as CISSP, CCSP, or Azure Security Engineer.
- Experience with other cloud platforms (AWS, Google Cloud) and their security tools.
- Knowledge of regulatory compliance requirements (e.g., GDPR, HIPAA).
Beneficial Knowledge:
Familiarity with the Defender suite of products, including Microsoft Defender for Endpoint, Microsoft Defender for Identity, Microsoft Defender for Office 365, and Microsoft Cloud App Security.
- Security Copilot Knowledge: Proven experience and knowledge in utilising Security Copilot for enhancing cyber defence strategies and operations.
Experience with other cloud platforms (AWS, Google Cloud) and their security tools.
Knowledge of regulatory compliance requirements (e.g., GDPR, HIPAA).
Benefits We Offer:
- Opportunity to work for Microsoft's Global Alliance Partner of the Year (17 of the last 20 years!)
- Pension, Electric Car Purchase scheme (tax-free!), 25 days holiday, Flexible benefits, Car allowance (where applicable), bonus, PMI, Life cover, IP cover, and much more.
- Exceptional development and training with a minimum of 80 hours/year of training and paid certifications.
- Avanade University - real-time access to technical and skilled resources globally.
- Dedicated career adviser to encourage your progression.
- Engaged and helpful coworkers genuinely interested in you.
- Reward and recognition program.
- Full benefits package including medical coverage, income protection policy, extended benefits, bonus program, generous retirement plan, and much more.
About Avanade:
Avanade leads in providing innovative digital services, business solutions, and design-led experiences for its clients, delivered through the power of people and the Microsoft ecosystem. Our professionals combine technology, business, and industry expertise to build and deploy solutions to realize results for clients and their customers. Avanade has 39,000 digitally connected people across 24 countries, bringing clients the best thinking through a collaborative culture that honours diversity and reflects the communities in which we operate. The majority owned by Accenture, Avanade was founded in 2000 by Accenture LLP and Microsoft Corporation. Learn more at is an Equal Opportunity Employer. We evaluate applicants without regard to race, colour, age, religion, sex, national origin, gender identity or expression, sexual orientation, disability, veteran, military or marital status, genetic information, or any other protected status.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. Please contact us to request accommodation.
We work hard to provide an inclusive, diverse culture with a deep sense of belonging for all our employees. Avanade believes that all persons are entitled to equal employment opportunities, and we do not discriminate against our employees, applicants, or job seekers because of their race, color, gender, religion, national origin, disability, veteran status, age, marital status, sexual orientation, genetic information, gender identity, or any other protect group status as defined by law.

LMAX Group is a global financial technology company and the leading independent operator of multiple institutional execution venues for FX and crypto currency trading. The Group's portfolio includes LMAX Exchange (institutional FX exchange and FCA regulated MTF), LMAX Global (FCA and CySec regulated brokers) and LMAX Digital (GFSC regulated institutional spot crypto currency exchange).

Our mission is to create a level playing field for all participants in the world's biggest financial markets, through transparent, precise and consistent execution, based on robust trading technology.

We are looking for people who want to help us change the game, not just play it.

LMAX Group fosters inclusive recruitment practices. We are an equal opportunity employer as we welcome everyone to our team. We encourage people of colour, women, people from LGBTQ+ community, and people with disabilities to apply. Please let us know if you need reasonable adjustments at any point in the application or interview process.

About the role:

Day to day, this role will involve managing our Cloud Infrastructure Security Posture across our brands, working alongside colleagues in New York, Singapore and New Zealand. You will be a key driver for ensuring development in the cloud is carried out to the highest security standards, driving the LMAX brand towards Compliance-As-Code and monitoring our environment for configuration and build improvements.

You will work with the wider technology teams to improve the security posture of our digital currency trading and custody solutions - not only the platform itself, but also how it interacts with the various blockchains and the on-premises low latency exchanges. The primary objective of maintaining transaction confidentiality and integrity, and the availability of the trading environments for LMAX customers.

The role operates on a hybrid model, with an expectation of two days per week at our Shepherd's Bush headquarters to foster collaboration and team connection

Responsibilities :

• Implement and Automate Security Controls: Explore, implement, and automate security controls across complex Cloud environments using tools like Terraform and Ansible .
• Security Reviews and Guidance: Provide Cloud security guidance, awareness, and reviews for Engineering teams, ensuring alignment with security standards such as but not limited to NIST.
• Third-Party Security Tools & Incident Response: Implement third-party security tools and assist in major incident response, working with the CSOC team on Cloud threats and events.
• Cloud Security Tooling & Threat Modelling : Build and enforce Cloud-native security tools, desired experience in conducting threat modelling, and architectural reviews to enhance security practices.
• Support, Compliance, and Governance: Support Risk & Compliance, support cost control measures, identify Cloud platform improvements, and promote Cloud security across the company.
• Map attack paths and lead implementation of controls to mitigate findings
• Work with the Security Operations Centre (SOC) tools to improve the alerts
• Maintain the confidentiality, integrity and availability of LMAX information assets.
• Continuous improvement of monitoring and alerting from the cloud estate feeds the SOC tools.
  

Requirements

• AWS Expertise & Cloud Security : Desired knowledge and experience in implementing security controls across AWS, and Azure would be beneficial.
• Cloud & Networking Skills: Desired experience in cloud networking.
• Kubernetes exposure: Experience with securing Kubernetes environments, and familiarity with Kubernetes logging and auditing practices.
• Agile & Automation Experience: Experience in agile environments, CI/CD platforms, and automating security processes, with scripting/programming skills (e.g. Python).
• Infrastructure & Compliance as Code: Knowledge of Infrastructure as Code (IaC) and Policy as Code practices, driving Cloud Security maturity in fast-paced settings.
• Stakeholder Management & Leadership: Proven ability to manage stakeholders, guide engineers on best practices, and an Interest for open-source technologies.
• Desired experience with securing deployment pipelines with web-based Git and on-premises gitlab repositories, and common cloud services such as Lambda, Cloudflare.

Benefits

• 25 days of holiday
• Bonus
• Pension contribution

• Private medical, dental, and vision coverage
• Life assurance
• Critical illness cover
• Wellness contribution program with access to ClassPass
• Plumm Platform
• Five volunteering days
• Give as You Earn initiative
• Learning and development programs
• Electric Vehicle Scheme
• Cycle to Work Scheme
• Season Ticket Loan

Our client, a global leader in cloud solutions, is seeking a highly accomplished Principal Cloud Security Architect to join their elite, fully remote technology team. This is a critical role where you will be responsible for designing, implementing, and overseeing robust security architectures for complex cloud environments across major providers like AWS, Azure, and GCP. You will champion security best practices, mitigate risks, and ensure the confidentiality, integrity, and availability of our client's cloud infrastructure and data.

Responsibilities:

• Lead the design and implementation of secure cloud architectures, frameworks, and strategies across multi-cloud environments.
• Develop and enforce security policies, standards, and guidelines for cloud operations.
• Conduct in-depth security assessments, threat modeling, and risk analyses of cloud deployments.
• Design and implement security controls, including identity and access management (IAM), encryption, network security, data loss prevention (DLP), and security monitoring solutions.
• Collaborate with engineering, operations, and development teams to integrate security into the CI/CD pipeline (DevSecOps).
• Evaluate and recommend new security technologies and services to enhance cloud security posture.
• Provide expert guidance and mentorship on cloud security best practices to technical teams.
• Respond to and manage security incidents, conducting forensic analysis and implementing remediation strategies.
• Develop and maintain comprehensive security documentation, including architecture diagrams, policies, and procedures.
• Stay abreast of emerging cloud security threats, vulnerabilities, and regulatory compliance requirements.
• Architect solutions for data residency, sovereignty, and compliance with GDPR, CCPA, and other relevant regulations.
• Lead security architecture reviews and contribute to strategic security planning initiatives.
• Engage with C-level stakeholders to communicate security risks and strategic recommendations.

Requirements:

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field; relevant certifications (e.g., CISSP, CCSP, AWS Certified Security – Specialty, Azure Security Engineer) are highly desirable.
• 10+ years of experience in information security, with a significant focus on cloud security architecture and engineering (AWS, Azure, GCP).
• Proven experience in designing and implementing large-scale, secure cloud infrastructures.
• Deep understanding of cloud networking, compute, storage, and database security concepts.
• Expertise in security frameworks such as NIST, ISO 27001, and SOC 2.
• Proficiency in scripting and automation for security tasks (e.g., Python, PowerShell, Terraform).
• Strong knowledge of threat modeling, vulnerability management, and incident response.
• Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences.

This is a fully remote position, based out of London, England, UK . Our client offers a highly competitive salary, exceptional benefits, and the opportunity to lead security initiatives at the highest level in a forward-thinking organization.

Role

Role:

Cloud Security & Solutions Architect –

Department : Infrastructure & Operations –

Grade : 7 (GBP39,975 – GBP47,416) plus 15% Market Supplement –

Responsible to : Microsoft Technical Services Manager –

Campus : Any (Belfast, Coleraine, Derry Londonderry) (Hybrid) –

Reference Number :

About UsnWe are a university with a national and international reputation for excellence, innovation and regional engagement, making a major contribution to the economic, social and cultural development of Northern Ireland. Our core business activities are teaching and learning, widening access to education, research and innovation and technology and knowledge transfer.

The RolenThe role holder will specialise in Azure, leading in architecting, implementing, and optimising cloud solutions to ensure the design of scalable and resilient architectures.

The primary remit of the role extends to supporting and maintaining the University's Cloud–Based Microsoft Enterprise configurations incorporating the M365 ecosystem, Entra ID, Azure Cloud Services and the Microsoft Security stack including Defender for Cloud, Defender for Office, Defender for Identity and Defender for Cloud Apps.

We're offering a 15% Market Supplement for this role, reflecting our commitment to attract top talent in the industry. This is a fantastic opportunity to join a multi–campus University working across multi–disciplinary teams within both our Infrastructure and security portfolios and beyond.

You will have the opportunity to contribute to and lead on solution design and implementation, complex problem resolution and ongoing service enhancement in relation to the entire Azure & M365 technology stack. You will collaborate closely with other key stakeholders within the Digital Services Directorate and beyond to explore, design, and deliver solutions, thereby significantly contributing to the University's growth in the Azure ecosystem through architecting, implementing, and optimising cloud solutions.

Join us and benefit from a role that not only challenges you but also compensates you competitively.

If you would like to have an informal discussion regarding this role, please contact Darragh McCrickard, Microsoft Technical Services Manager via email.

About You

Degree or postgraduate qualification in an Information Technology or Computer Science related discipline or can demonstrate an appropriate level and range of professional experience.

Experience in designing and implementing Azure cloud solutions from design through to production.

Experience of deploying, managing and supporting any two of the following technologies in a large organisation: Azure IaaS, PaaS and SaaS, Entra ID, Infrastructure as Code (IaC) tools such as Terraform and ARM, Microsoft Defender Suite including Defender for Cloud, Defender for Office, Defender for Identity and Defender for Cloud Apps, Containerisation technologies including Azure Kubernetes, or Secure logging of Azure and Microsoft Events such as Log Analytics.

Experience and proficiency in scripting languages such as PowerShell or Python.

Please find our employee benefits on our website.

Ulster University holds a Silver Athena SWAN award in recognition of our commitment to advancing Gender equality in higher education. You can read more about what this means on our University website. The University has a range of initiatives to support a family friendly working environment, including flexible working.

The University is an equal opportunities employer and welcomes applicants from all sections of the community, particularly from those with disabilities. Appointment will be made on merit.

#J-18808-Ljbffrn

Location: Remote (UK) – travel required as per project needs

About Us

Qodea is Europe’s largest Google Cloud specialist partner and a leading cloud consultancy with offices in the UK, Netherlands, and Romania. This role sits within tmc3 , our dedicated cyber security consultancy that helps organisations of all sizes protect, comply and advance in the digital era.

Founded by leaders with a shared goal of making cyber security a business enabler, we value passion, collaboration, and perseverance to deliver the best outcomes for our customers and partners.

About the Role

We are seeking an experienced Cloud Security Architect (Microsoft ) with deep expertise in Microsoft technologies (Azure, M365, Defender, Active Directory, etc.) to join our Secure Services team. The ideal candidate will have a strong consultancy background and demonstrable experience delivering secure solutions within the UK public sector , including compliance with government security standards and frameworks.

What you'll do

• Design and implement secure cloud architectures (Microsoft) tailored to public sector requirements.
• Lead security assessments, threat modelling, and risk analysis for cloud-based and hybrid environments.
• Collaborate with internal teams and external stakeholders to ensure security best practices are embedded throughout project lifecycles.
• Develop and maintain security documentation, including architecture diagrams, policies, and procedures.
• Advise clients on compliance with standards such as NCSC Cloud Security Principles, ISO 27001, Cyber Essentials Plus, and GDPR.
• Support incident response planning and execution.
• Stay current with emerging threats, vulnerabilities, and regulatory changes.

Requirements

What You’ll Bring

Experience & Skills

• Proven experience working in a consultancy capacity within the UK public sector .
• Strong understanding of security frameworks, risk management, and governance.
• Excellent communication and stakeholder engagement skills.
• Strong knowledge of Microsoft security technologies (Azure Security Center, Sentinel,
• Defender, Purview, etc.).
• Experience with M365 security and compliance configurations.
• Familiarity with hybrid environments and securing on-prem to cloud transitions.
• Familiarity with Active Directory.

Leadership & Attributes

• Trusted advisor mindset, able to influence and guide clients.
• Strong collaboration and relationship-building skills.
• Analytical thinker with a passion for secure cloud adoption.

Clearance Requirements

• Ability to obtain (or currently hold) SC/DV Security Clearance
• SC clearance usually requires 5 years of continuous UK residency
• DV clearance usually requires 10 years of continuous UK residency

Qualifications

• Degree in Computer Science, Cybersecurity, or related field (or equivalent experience).

Relevant certifications such as:

• Microsoft Certified: Azure Security Engineer Associate
• CISSP, CISM, or similar
• TOGAF or equivalent

How you'll grow

• Clear career progression opportunities within our career framework
• Cross-skilling and internal mobility across business areas
• Access to dedicated training, certifications, and professional memberships
  

Benefits

Financial:

• Competitive base salary.
• Matching pension scheme (up to 5%) from day one.
• Discretionary company bonus scheme.
• 4 x annual salary Death in Service coverage from day one.
• Employee referral scheme.

Health and Wellbeing:

• Private medical insurance from day one.
• app: access to remote GPs, second opinions, mental health support, and physiotherapy.
• EAP service
• Cycle to Work scheme.

Time Off and Flexibility:

• 36 days annual leave (inclusive of bank holidays).
• An extra paid day off for your birthday.
• Ten paid learning days per year.
• Flexible working hours.
• Market-leading parental leave.
• Sabbatical leave (after five years).
• Work from anywhere (up to 3 weeks per year).

Development and Recognition:

• Industry-recognised training and certifications.
• Bonusly employee recognition and rewards platform.
• Clear opportunities for career development.
• Length of Service Awards

Extra Perks:

• Regular company events.
• Tech Scheme.

At Qodea, we champion diversity and inclusion. We believe that a career in IT should be open to everyone, regardless of race, ethnicity, gender, age, sexual orientation, disability or neurotype. We value the unique talents and perspectives that each individual brings to our team, and we strive to create a fair and accessible hiring process for all. If you feel we can improve in any way, please reach out to our careers team via email at or connect with us on LinkedIn via our Qodea Company Page .

Location: Remote (UK) – travel to customer sites required as per project needs.

About Us

Qodea is Europe’s largest Google Cloud specialist partner and a leading cloud consultancy with offices in the UK, Netherlands, and Romania. This role sits within tmc3 , our dedicated cyber security consultancy that helps organisations of all sizes protect, comply and advance in the digital era.

Founded by leaders with a shared goal of making cyber security a business enabler, we value passion, collaboration, and perseverance to deliver the best outcomes for our customers and partners.

About The Role

We are seeking an experienced Cloud Security Architect with deep expertise in Amazon Web Services (AWS) to join our Secure Services team. The ideal candidate will have a strong consultancy background and demonstrable experience delivering secure solutions within the UK public sector, including compliance with government security standards and frameworks.

What You'll Do

• Design and implement secure cloud architectures (AWS) tailored to public sector requirements.
• Lead security assessments, threat modelling, and risk analysis for cloud-based and hybrid environments.
• Collaborate with internal teams and external stakeholders to ensure security best practices are embedded throughout project lifecycles.
• Develop and maintain security documentation, including architecture diagrams, policies and procedures.
• Advise clients on compliance with standards such as NCSC Cloud Security Principles, ISO 27001, Cyber Essentials Plus, and GDPR.
• Support incident response planning and execution.
• Stay current with emerging threats, vulnerabilities, and regulatory changes.

Requirements

What You’ll Bring

Experience & Skills

• Proven consultancy experience within the UK public sector .
• Deep expertise in AWS security services (IAM, KMS, GuardDuty, Security Hub, etc.).
• Familiarity with AWS GovCloud and UK public sector hosting requirements.
• Strong understanding of security frameworks , governance, and risk management.
• Excellent stakeholder engagement and communication skills.

Leadership & Attributes

• Trusted advisor mindset, able to influence and guide clients.
• Strong collaboration and relationship-building skills.
• Analytical thinker with a passion for secure cloud adoption.

Clearance Requirements

• Ability to obtain (or currently hold) SC/DV Security Clearance
• SC clearance usually requires 5 years of continuous UK residency
• DV clearance usually requires 10 years of continuous UK residency

Qualifications

• Degree in Computer Science, Cybersecurity, or related field (or equivalent experience).
• Relevant certifications such as:

• AWS Certified Security – Specialty
• CISSP, CISM, or similar
• TOGAF or equivalent

How You’ll Grow

• Clear career progression opportunities within our career framework
• Cross-skilling and internal mobility across business areas
• Access to dedicated training, certifications, and professional memberships

Benefits

Financial:

• Competitive base salary.
• Matching pension scheme (up to 5%) from day one.
• Discretionary company bonus scheme.
• 4 x annual salary Death in Service coverage from day one.
• Employee referral scheme.

Health and Wellbeing:

• Private medical insurance from day one.
• app: access to remote GPs, second opinions, mental health support, and physiotherapy.
• EAP service
• Cycle to Work scheme.

Time Off and Flexibility:

• 36 days annual leave (inclusive of bank holidays).
• An extra paid day off for your birthday.
• Ten paid learning days per year.
• Flexible working hours.
• Market-leading parental leave.
• Sabbatical leave (after five years).
• Work from anywhere (up to 3 weeks per year).

Development and Recognition:

• Industry-recognised training and certifications.
• Bonusly employee recognition and rewards platform.
• Clear opportunities for career development.
• Length of Service Awards

Extra Perks:

• Regular company events.
• Tech Scheme.

At Qodea, we champion diversity and inclusion. We believe that a career in IT should be open to everyone, regardless of race, ethnicity, gender, age, sexual orientation, disability or neurotype. We value the unique talents and perspectives that each individual brings to our team, and we strive to create a fair and accessible hiring process for all. If you feel we can improve in any way, please reach out to our careers team via email at or connect with us on LinkedIn via our Qodea Company Page .