Enterprise Solution Architect

Role Overview

• Define and maintain CloudPay’s security architecture vision, principles, standards, and roadmaps.
• Ensure security architecture aligns with business objectives, regulatory expectations, and risk appetite.
• Design secure, scalable patterns for APIs, data platforms, AI workloads, and cloud‑native services.
• Provide authoritative security architecture guidance across engineering, platform, and data teams.
• Own the security architecture for workforce and customer identity platforms.
• Drive adoption of zero trust principles, strong authentication, least privilege access, and secure identity lifecycle management.
• Provide architectural oversight for single sign‑on, federation, privileged access management, and conditional access controls.
• Lead security architecture across AWS and Azure, including identity, networking, encryption, monitoring, and workload protection.
• Define security guardrails and reference designs using cloud‑native services and infrastructure‑as‑code.
• Support secure migration, modernization, and continuous improvement of cloud platforms.
• Design and review security controls for AI/ML systems, ensuring customer data has confidentiality, integrity, and availability maintained.
• Chair the Security Architecture Review Board (SARB), ensuring consistent architectural decision‑making.
• Act as a trusted advisor to senior engineering leaders, product teams, and executive stakeholders.
• Mentor security engineers and architects and promote security‑by‑design across the organisation.
• Ensure architecture decisions are documented, traceable, and aligned to enterprise standards.

Requirements

• Extensive experience in security architecture, cloud security engineering, or senior security leadership roles.
• Proven track record securing large‑scale, cloud‑native SaaS platforms, ideally in regulated environments.
• Demonstrated experience operating within formal architecture governance frameworks.
• Experience engaging with senior leadership, risk committees, and multidisciplinary decision‑making forums.
• Strong understanding of balancing security risk, business enablement, and delivery velocity.
• Deep experience in IAM architecture for both workforce and customer identities.
• Strong understanding of modern authentication, authorization, and access governance.
• Practical application of zero trust and identity‑centric security models.
• Advanced knowledge of AWS and Azure security architectures and native security services.
• Experience designing secure cloud networking, segmentation, encryption, and monitoring.
• Familiarity with containerized, serverless, and platform‑as‑a‑service security patterns.
• Knowledge of security risks across AI/ML lifecycles, including data ingestion, training, and inference.
• Experience evaluating AI‑related threats such as data leakage, prompt injection, and model abuse.
• Understanding of AI governance and assurance concepts from a security perspective.
• Experience embedding security into SDLC, CI/CD pipelines, and infrastructure‑as‑code.
• Strong threat modeling, security design review, and architecture documentation skills.
• Ability to communicate complex technical concepts clearly to both technical and non‑technical audiences.
• Confident written and verbal communication suitable for executive, risk, and governance forums.

Tech Stack

• AWS
• Azure
• Cloud
• SDLC

Benefits

• Competitive Salary
• Competitive vacation allowance
• Calm app
• WFH Allowance
• Life Assurance
• Private Medical Insurance
• Cycle to Work Scheme
• EAP
• Eye Tests & Glasses Contribution
• Simplyhealth Enhanced Health Plan
• Pension Scheme
• Give-As-You-Earn (GAYE)
• Employee Referral Program
• CloudPay NOW
• Paid Volunteering days
• Marriage Leave
• Bereavement Leave
• Vacation Purchase Plan