Cloud Security Architect

Join Ekco as a Cloud Security Architect, where you will lead secure cloud transformation for enterprise and regulated clients. You will assess complex environments, define security strategies and architectures, and guide the delivery of secure solutions across cloud, hybrid, and on-premises platforms. This hybrid role is based in Dublin and may include travel to client sites.

• Assess complex environments, define security strategies and architectures, and guide the delivery of secure solutions across cloud, hybrid and on-premises platforms.
• Design Cloud Adoption Framework aligned landing zones and guardrails across Azure and AWS, using Zero Trust principles, network segmentation, encryption, key and secrets management.
• Lead workshops and technical workstreams, support pre-sales and statements of work, mentor colleagues, and communicate architecture decisions, risks and recommendations to technical and executive stakeholders.

• Substantial experience designing and assuring secure enterprise cloud architectures, preferably in Microsoft Azure, with practical knowledge of AWS and hybrid environments
• Strong knowledge of identity, network, platform, application, data, security operations and resilience controls, including Zero Trust and shared responsibility principles
• Hands-on experience with cloud governance, landing zones, Infrastructure as Code and automated delivery using Terraform, Bicep or equivalent tooling and Azure DevOps or GitHub Actions
• Experience applying regulatory and security requirements such as GDPR, NIS2, DORA, ISO 27001, NIST, CIS, CSA and OWASP to cloud environments
• Ability to conduct security assessments and threat modelling, evaluate technical risk, and produce architecture diagrams, security designs, risk registers, remediation roadmaps and executive reports
• Strong consulting, leadership and stakeholder-management skills, including workshop facilitation, pre-sales support and the ability to explain complex risk in clear business language
• A degree in a relevant discipline or equivalent professional experience
• Experience securing AWS or Google Cloud alongside Azure, including multi-account or multi-subscription governance
• Relevant certifications such as Microsoft Certified: Cybersecurity Architect Expert, Azure Security Engineer Associate, AWS Certified Security – Specialty, HashiCorp Certified: Terraform Associate, CISSP, CCSP or CISM; equivalent practical experience is equally valued
• Experience with Kubernetes, container security, software supply chain controls, AI security, data protection or regulated industry environments
• Professional membership or accreditation with ISC2, ISACA, CIISec or BCS