{"id":3809598,"url":"https://alion.io/job/discovery-security-solutions-architect","title":"Security Solutions Architect","company":{"id":1811548,"name":"Discovery","domain":"discovery.co.za","url":"https://alion.io/company/discovery-co-za","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sandton, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"NIST CSF","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-20T02:00:00Z","employer_posted_date":null,"last_verified_at":"2026-10-20T02:00:00Z","board_verified":false,"closed_at":null,"days_open":17,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":17},"description":"Discovery – Information Governance and Security\r\n\nSecurity Solutions (Cloud) Architect \r\n\nAbout Discovery\n\nDiscovery’s core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fast-paced and dynamic environment enables smart, self-driven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.\n\nAbout Information Governance and Security (IGS)\n\nThe Information Governance and Security function within the Discovery Group aims to provide assurance that the organisation’s information assets are adequately protected against threats on a continual basis. This is achieved by finding the right balance of information security and business freedom.\n\nKey Purpose\n\nThe Cloud Security Architect is responsible for defining, governing, and guiding secure cloud architectures across the organisation, with Google Cloud Platform (GCP) as the primary strategic platform, while maintaining strong security and architectural oversight across AWS, Azure, and hybrid on-premises environments.\n\nThe role combines security architecture ownership, cloud security consulting, and engineering oversight. Acting as a trusted technical advisor, the Cloud Security Architect supports teams in securing existing cloud platforms, leads the secure onboarding of new cloud environments, and ensures security is embedded by design across all cloud initiatives.\n\nThe primary accountability is security architecture, design architect, and enablement, rather than day-to-day platform operations. Hands-on engagement is expected where required to validate designs, assess risk, and guide secure implementation.\n\nAreas of responsibility may include but not limited\n\nCloud Security Architect\n\nParticipate in development of information governance and privacy strategy in support of business objectives and arising risks with particular focus on information governance and privacy capabilities, operational and service excellence. \n\nDefine and own cloud security architecture standards.\n\nDesign and review secure GCP, AWS and Azure landing zones, aligned to:\r\n\nIdentity-driven security architectures with continuous access evaluation\n\nGranular, risk-based access controls and privilege management\n\nEnforcement of security controls through native cloud services, organisational policies, and approved reference architectures\n\nAct as design architect for GCP security architectures, ensuring consistency, scalability, and risk alignment.\n\nCore Security Architecture & DevSecOps\n\nDefine enterprise cloud security baselines aligned to ISO 27001, NIST CSF, and CIS Benchmarks.\n\nGuide Zero Trust architectures and security monitoring patterns.\n\nProvide architectural oversight for DevSecOps and secure software supply chains, including:\r\n\nSecure CI/CD patterns\n\nAutomated security scanning and policy enforcement\n\nContainer, workload, and artefact hardening\n\nInfrastructure-as-Code (IaC) architecture and practices\n\nMulti-Cloud & Hybrid Security\n\nApply cloud-agnostic security principles across GCP (primary), AWS, and Azure.\n\nConsult and guide security architectures for:\r\n\nExisting cloud environments\n\nNew cloud onboarding initiatives\n\nNew services to be deployed and activated in any of the clouds\n\nDefine secure connectivity patterns between cloud platforms and on-premises environments.\n\nSupport consolidation and rationalisation of cloud accounts, subscriptions, projects, and tenants.\n\nInfrastructure-as-Code (IaC) Security & Governance\n\nDemonstrate strong IaC literacy, with the ability to read, understand, review, and assess IaC code (e.g. Terraform and cloud-native templates).\n\nIdentify and remediate security risks, misconfigurations, and architectural gaps within IaC, ensuring alignment to security standards, secure baselines, least privilege, and Zero Trust principles.\n\nSupport security and operations teams by reviewing and guiding IaC submissions from a security architecture perspective.\n\nIdentity, Platform & Data Security\n\nDefine enterprise cloud identity architecture, including federation, workload identities, and privileged access models.\n\nGuide security architecture for Kubernetes, serverless platforms, and managed cloud services.\n\nConsult on standards for encryption, key management, secrets management, and data protection\n\nGovernance, Risk & Enablement\n\nEnsure cloud architectures are auditable, observable, and compliant with internal standards and external regulations.\n\nParticipate in architecture risk reviews.\n\nProduce clear security architecture documentation.\n\nPersonal Attributes and Skills\n\nStrong security architecture mindset with practical cloud expertise\n\nClear communicator with technical and non-technical stakeholders\n\nPragmatic, risk-based, and delivery-focused\n\nComfortable operating in complex, enterprise environments\n\nAbility to rapidly learn, adapt, and apply new concepts in a changing technical environment\n\nPassion for researching new technologies and exploring innovative security solutions\n\nQualifications & Experience\n\nEssential \n\n10+ years’ experience in IT and/or Information Security\n\n5+ years’ experience in cloud security architecture or engineering\n\n2 years Layer 7 enterprise firewall experience\n\nProven experience designing and governing enterprises, hybrid, and multi-cloud environments\n\nExperience operating in a consultative or advisory role within complex organisations\n\nRequired Technical Skills\n\nStrong experience with GCP, AWS and Azure, including IAM, networking, firewalling, and native security controls\n\nDeep understanding of:\r\n\nIdentity and access management\n\nNetwork and platform security\n\nData protection and encryption\n\nInfrastructure-as-Code and security-as-code concepts\n\nConsult on secure AI architectures\n\nCertifications (Beneficial)\n\nGoogle Professional Cloud Security Engineer (highly desirable)\n\nGoogle Professional Cloud Architect\n\nAWS Professional Cloud Security Engineer\n\nAWS Professional Cloud Architect\n\nAzure Professional Cloud Security Engineer\n\nAzure Professional Cloud Architect\n\nCISSP, CCSP or equivalent\n\nEMPLOYMENT EQUITY \n\nThe Company’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.","description_format":"text","description_chars":6534,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Health Insurance & Benefits","Digital Banks & Neobanks","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-11-05T14:24:45Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":0.85,"p_active":0.757,"p_room":0.45,"age_days":17,"expected_fill_days":11,"reasons":["seen:17","win:tail"],"computed_at":"2026-11-06T04:39:27Z"},"pay":null,"html_url":"https://alion.io/job/discovery-security-solutions-architect","json_url":"https://alion.io/job/discovery-security-solutions-architect.json","meta":{"generated_at":"2026-11-06T04:39:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7989,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1811548},"rest":"https://alion.io/mcp/rest/get_company?id=1811548"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdiscovery-security-solutions-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdiscovery-security-solutions-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdiscovery-security-solutions-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/discovery-security-solutions-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdiscovery-security-solutions-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3809598}},{"tool":"search_jobs","arguments":{"company":"discovery.co.za","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3809598},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}