{"id":3869124,"url":"https://alion.io/job/experis-uk-cloud-platform-security-architect","title":"Cloud Platform Security Architect","company":{"id":53987,"name":"Experis UK","domain":"experis.co.uk","url":"https://alion.io/company/experis","size_band":"1001-5000","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":506,"max":506,"currency":"GBP","period":"week","gross":null,"usd_annual":35464},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"FinOps","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-11-02T15:01:59Z","employer_posted_date":null,"last_verified_at":"2026-11-02T15:01:59Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"Role Title: Cloud Platform Security Architect\nDuration: 3 month initial contract\nLocation: London. Hybrid, 2 days per week onsite\nRate: up to £506 p/d Umbrella inside IR35\nRole purpose / summary\nJob Description:\nThe Cloud Platform & Security Architect is responsible for defining and governing the architecture of FSCS cloud, hybrid infrastructure and security platforms. The role provides strategic and technical architectural leadership across Microsoft Azure, cloud platforms, networking, identity, security and resilience, ensuring technology solutions are secure, scalable, resilient, supportable and aligned with FSCS technology strategy and architectural principles.\nThe role defines target-state architectures, reference architectures, technical standards, patterns and architectural guardrails that guide the design and evolution of FSCS technology platforms.\nWorking closely with Enterprise Architecture, Information and Cyber Security, the IT Infrastructure & Security Manager, Product and Engineering teams, and strategic technology partners, the role provides architecture direction and design assurance across technology change and investment.\nThe role acts as a senior technical authority for cloud platform and security architecture, supporting strategic technology decisions while ensuring solutions remain aligned with FSCS business, security, resilience and operational requirements.\nMy Priorities - what I will deliver\nCloud Platform Architecture\nDefine and maintain target-state architecture for Microsoft Azure, cloud and hybrid technology platforms.\nDefine reference architectures and reusable patterns for Azure landing zones, Management Groups, subscriptions, networking, identity, compute, storage, monitoring and governance.\nEstablish architectural principles and guardrails covering Azure Policy, RBAC, PIM, private connectivity, resource organisation, logging and platform governance.\nDefine architecture patterns that enable scalable, secure and consistent technology delivery across FSCS.\nProvide architectural direction for cloud migration, modernisation and re-platforming initiatives.\nAssess new Azure services and cloud technologies and provide recommendations for their adoption.\nEnsure cloud architecture balances security, resilience, scalability, performance, operational supportability and cost efficiency.\nDefine architectural direction for Infrastructure as Code and automated cloud provisioning, including Terraform and Azure DevOps.\nMaintain cloud platform architecture roadmaps aligned with FSCS technology strategy.\nHybrid Infrastructure Architecture\nDefine target-state architecture for FSCS hybrid infrastructure and its integration with Microsoft Azure.\nDefine target-state architectural patterns and standards for core infrastructure services, including technologies such as Active Directory, Entra ID, DNS, DHCP and PKI.\nProvide architectural direction for compute, virtualisation, storage and associated platform technologies.\nDefine secure and resilient integration patterns between cloud, on-premises and third-party environments.\nDevelop architecture roadmaps supporting infrastructure modernisation and reduction of legacy technology.\nIdentify architectural dependencies, constraints and technical debt associated with hybrid infrastructure.\nEnsure infrastructure architecture supports agreed security, resilience, lifecycle and operational requirements.\nNetwork & Connectivity Architecture\nDefine target-state network architecture across cloud and hybrid environments.\nDefine reference architectures and patterns for Azure networking, routing, segmentation, firewalls, private connectivity, VPN, load balancing and application delivery.\nDefine network architecture aligned with FSCS Zero Trust principles and security requirements.\nProvide architectural direction across Azure networking, Cisco technologies, Zscaler and associated network and security platforms.\nDefine secure connectivity patterns between Azure, on-premises infrastructure, SaaS services, third parties and external services.\nEstablish architecture standards and principles for network resilience, segmentation, availability and secure connectivity.\nAssess emerging networking technologies and recommend appropriate strategic direction.\nSecurity Architecture & Technical Controls\nDefine cloud platform and infrastructure security architecture aligned with FSCS security policies, enterprise architecture principles and regulatory requirements.\nDefine security architecture patterns and technical guardrails across cloud, identity, network and infrastructure platforms.\nProvide architectural direction for Microsoft Defender, Sentinel and associated Microsoft security technologies.\nDefine identity architecture covering Entra ID, Conditional Access, PIM, RBAC, MFA, SSO, managed identities and workload identities.\nDefine architectural patterns for Azure Firewall, WAF, DDoS Protection, Key Vault, encryption, certificates and secrets management.\nDefine architecture patterns aligned with Zero Trust principles across identity, networks, applications and cloud platforms.\nEnsure security, vulnerability management, hardening, logging and monitoring requirements are incorporated into reference architectures and solution designs.\nWork closely with Information and Cyber Security to ensure platform architectures align with security policies, standards and risk requirements.\nEvaluate emerging security technologies and recommend appropriate architectural approaches.\nResilience, Backup & Disaster Recovery\nDefine architecture principles and patterns for availability, resilience, backup, recovery and disaster recovery.\nDefine appropriate resilience and redundancy patterns for critical cloud and hybrid platforms.\nEnsure architecture supports agreed recovery objectives and operational resilience requirements.\nDefine reference architectures for backup, replication, failover and recovery capabilities.\nIdentify architectural risks and single points of failure and recommend appropriate design improvements.\nEnsure resilience and recoverability are incorporated into architecture from the earliest stages of technology design.\nProvide architectural direction for the evolution of FSCS disaster recovery capabilities.\nArchitecture Governance & Design Authority\nAct as a key member of the Technology Design Authority and relevant architecture governance forums.\nDefine and maintain cloud platform, infrastructure and security architecture principles, standards, reference architectures and patterns.\nProvide architectural review and design assurance for technology solutions and major changes.\nEnsure proposed solutions align with enterprise architecture, technology strategy, security requirements and approved architecture standards.\nDefine and assure non-functional architectural requirements covering availability, resilience, performance, scalability, security, supportability and cost efficiency\nIdentify and document architectural risks, dependencies, constraints and technical debt.\nReview architectural exceptions and provide recommendations on appropriate treatment.\nMaintain architecture decision records and other relevant architecture documentation.\nProvide architecture assurance throughout the technology delivery lifecycle.\nWork with Enterprise Architecture to ensure domain architecture remains aligned with FSCS enterprise technology direction.\nEnsure strategic suppliers and technology partners align their designs with FSCS architecture principles and standards.\nTechnology Strategy & Roadmaps\nContribute and maintain cloud platform, infrastructure, network and security technology roadmaps.\nTranslate FSCS technology strategy into target-state architecture and practical architecture transition plans.\nDefine transition architectures and sequencing required to move from current-state to target-state technology architecture.\nIdentify opportunities for platform modernisation, consolidation, standardisation and simplification.\nAssess technology lifecycle, obsolescence and technical debt and recommend appropriate strategic responses.\nEvaluate emerging technologies and determine their potential relevance and value to FSCS.\nProvide architectural input into technology investment decisions, business cases and strategic initiatives.\nEnsure architectural decisions consider long-term sustainability, interoperability, resilience, security and cost.\nProvide clear architecture recommendations to senior technology stakeholders.\nEmerging Technology & AI\nAssess emerging technologies, including AI-enabled services, for their potential impact on FSCS cloud and technology architecture.\nEnsure appropriate architecture and security considerations are incorporated when AI-enabled technologies integrate with cloud and platform services.\nMaintain awareness of relevant developments in AI, automation and cloud technologies and advise on their architectural implications.\nMy knowledge - what I need to know\nEssential\nCCSP, CISSP, or equivalent industry-recognised cloud/security certification.\nStrong knowledge of Microsoft Azure architecture across networking, identity, security, compute, storage, monitoring and governance.\nStrong knowledge of Azure landing zones, Management Groups, Azure Policy, RBAC, PIM and cloud governance.\nStrong enterprise networking and security knowledge, including routing, segmentation, firewalls, VPNs and private connectivity.\nAdvanced knowledge of Active Directory, Entra ID, Conditional Access, MFA, PIM, SSO, certificates and authentication technologies.\nStrong understanding of Microsoft Defender, Sentinel, Zero Trust and cloud security architecture.\nStrong understanding of hybrid infrastructure, resilience, backup and disaster recovery architecture.\nGood practical understanding of Infrastructure as Code, including Terraform, Azure DevOps and automated cloud deployment.\nUnderstanding of AI-enabled technologies and associated architecture and security considerations.\nStrong knowledge of architecture governance, design assurance, reference architectures and technical standards.\nStrong analytical, communication, influencing and stakeholder-management skills.\nExperience\nExtensive experience designing and assuring cloud platform, security and hybrid infrastructure architectures in complex enterprise environments.\nProven experience in a senior architecture role, with strong expertise in Microsoft Azure, networking, identity, governance, resilience and platform security.\nExperience developing target-state architectures, reference architectures, standards and reusable architectural patterns.\nExperience providing architecture assurance through design-authority or architecture-governance processes.\nExperience supporting cloud migration, modernisation, re-platforming and technology transformation initiatives.\nExperience identifying and managing architectural risk, technical debt, lifecycle and obsolescence.\nExperience with Infrastructure as Code and automated cloud deployment, including Terraform and Azure DevOps.\nExperience assessing AI-enabled technologies from an architecture and security perspective.\nExperience working across Enterprise Architecture, Information and Cyber Security, Product, Engineering, operational teams, suppliers and managed-service partners.\nExperience communicating complex architecture decisions, risks and options to technical and non-technical stakeholders.\nExperience producing technology roadmaps, architecture documentation and decision records.\nExperience working within a regulated environment.\nDesirable\nMicrosoft Certified: Azure Solutions Architect Expert, or demonstrable equivalent expertise.\nTOGAF or equivalent architecture framework knowledge.\nAdditional relevant certifications such as Microsoft Azure Security Engineer, CCNP or HashiCorp Terraform Associate.\nExperience with FinOps and cloud cost-optimisation practices.\nKnowledge of AI governance, responsible AI and emerging AI security considerations.\nExperience with enterprise architecture modelling an...","description_format":"text","description_chars":12539,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security"],"lifecycle":[{"event":"open","at":"2026-11-06T13:38:30Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.596,"p_room":1,"age_days":4,"expected_fill_days":36,"reasons":["seen:4","agency","urgency","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":35464,"is_top_pay":false},"html_url":"https://alion.io/job/experis-uk-cloud-platform-security-architect","json_url":"https://alion.io/job/experis-uk-cloud-platform-security-architect.json","meta":{"generated_at":"2026-11-07T13:54:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17289,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53987},"rest":"https://alion.io/mcp/rest/get_company?id=53987"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fexperis-uk-cloud-platform-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fexperis-uk-cloud-platform-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fexperis-uk-cloud-platform-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/experis-uk-cloud-platform-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fexperis-uk-cloud-platform-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3869124}},{"tool":"search_jobs","arguments":{"company":"experis.co.uk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3869124},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}