Senior Cloud Security Architect

About EkcoFounded in 2016, Ekco has quickly become one of Europe’s fastest-growing cloud solution providers and your trusted security-first Managed Service Provider. IT leaders choose Ekco to drive operational efficiency, scale smarter and stay ahead of risk – powered by local expertise, delivered at European scale. We specialise in helping organisations advance their cloud maturity guiding transformation, strengthening security, and maximising the value of their technology investments. In simple terms: we help organisations modernise with confidence securing their systems, optimising their cloud, and keeping them resilient in a rapidly changing world. Today, we’re a thriving team of 1,000+ talented and supportive colleagues across the UK, Ireland, Benelux, South Africa, and Malaysia—and we’re continuing to grow.Our Core ValuesOn It: We take ownership, follow through, and get things done.All In: We collaborate, support each other, and commit fully to shared goals.Connected: We build trusted relationships with colleagues, clients, and partners.Hungry to Grow: We stay curious, keep learning, and push ourselves to the next level.The RoleEkco is seeking a highly skilled Cloud Security Architect with extensive expertise in Information & Cyber Security, IT/OT, and large-scale cloud and on-premises enterprise environments. In this pivotal role you will collaborate directly with Enterprise Clients to provide expert advice, conduct thorough assessments, and deliver comprehensive programmes focused on Enterprise Cyber & Cloud Security. As a trusted advisor you will play a crucial role in Ekco's mission to deliver cutting‑edge technologies and cyber assurance services to our clients, ensuring minimal disruption while enabling highly effective operational cyber programmes. Your contributions will help forge strong relationships with some of the largest organisations in Ireland and globally, including numerous Fortune 500 companies across various industries such as Financial, Life‑Sciences, Insurance, Telecommunications, Construction, State, and Semi‑State.What You’ll Be Responsible ForConduct Cloud Security Audits and Assessments – Regularly perform cloud (Azure and/or AWS) security audits and assessments to identify vulnerabilities and ensure compliance with industry standards.Develop and Maintain Cloud Security Strategies – Create and update comprehensive cloud security strategies that align with the organisation’s goals and regulatory requirements.Develop and Implement Cloud Security Policies – Create and enforce cloud security policies and procedures to protect the organisation's assets and data.Evaluate and Recommend Cloud Security Solutions – Assess new cloud security technologies and solutions and recommend their adoption to enhance the organisation’s security posture.Zero Trust Architecture – Architect and champion Zero Trust security models across Azure and hybrid environments, including identity, device, and network segmentation strategies.Deploy Secure‑by‑Design Cloud Environments – Develop and deploy new CAF Landing Zone environments through automation. Implement and manage CSPM tools to continuously monitor, assess, and remediate misconfigurations and vulnerabilities in Azure environments.Security Automation and DevSecOps Integration – Lead the integration of security controls into CI/CD pipelines, ensuring automated security testing and compliance checks are part of the deployment lifecycle (DevSecOps).Collaborate with Cross‑Functional Teams – Work closely with other departments, such as IT, Legal, and Compliance, to ensure cohesive security measures across the organisation.Stakeholder Engagement & Security Evangelism – Act as a security evangelist, providing guidance and best‑practice insights to development, operations, and business teams on secure cloud design and deployment practices.Mentor and Train Team Members – Provide guidance and training to junior team members and other staff on security best practices and emerging threats.Engage in Continuous Learning – Stay informed about the latest security trends, technologies, and threats, and continuously improve your skills and knowledge.RequirementsEducation: Bachelor's or Master's level in Information Security, Computer Science, or a related field, or equivalent professional work experience.Azure Platform – Proven experience architecting and deploying secure solutions using Azure services (e.g., Azure AD, Key Vault, Sentinel, Defender, Policy, Blueprints).DevOps & IaC Mastery – Advanced proficiency in Infrastructure‑as‑Code (Terraform, Bicep, ARM templates) and automation within Azure DevOps pipelines. Hashicorp Terraform associate (003/4).Cloud Security Technologies – Comprehensive understanding of cloud security technologies across Azure, M365, AWS and Zero Trust concepts.Cloud Security Architecture – Extensive experience in cloud security architecture and management, as well as knowledge of security best practices – preferably with Azure.Compliance & Regulatory Knowledge – In‑depth understanding of regulatory requirements (GDPR, NIS2, DORA, SOC 2, HIPAA) and experience implementing controls in Azure environments.Security Frameworks & Best Practices – Strong knowledge of cloud security frameworks, such as CIS, NIST, CSA and OWASP, and the application of controls and guardrails specific to cloud environments.Interpersonal Skills – Strong leadership, communication, and stakeholder management skills, with the ability to translate technical risks into business language.Cloud Security Certifications – Cloud architect certifications at Professional/Expert Level, e.g. Microsoft Azure Solutions Architect (AZ‑305), Microsoft Cybersecurity Architect (SC‑100), Azure Security Engineer Associate (AZ‑500). Optional AWS Cloud Solutions Architect, AWS Cloud Security Architect.Cybersecurity Qualifications – Possession or progress towards cybersecurity qualifications such as CISSP, CCSP and CISM.Professional Accreditation – Professional accreditation from bodies like ISC2, ISACA, CiiSec or BCS.Additional RequirementsExperience in managing and securing multi‑cloud environments (e.g., Azure, AWS, GCP).Broad knowledge of information security, risk management, and corporate governance.Excellent skills in Infrastructure‑as‑Code (IaC) tools (e.g. Terraform, Bicep, CloudFormation).Proficient in CASB, CSPM, IAM, SIEM, MDR, XDR and other related fields.Additional certifications at the Microsoft or AWS Associate level.Additional Azure or AWS Cloud Security or Engineer‑level certifications.Experience with AWS Management and Governance, Identity and Security services.Relevant cyber security certifications such as GSEC or CASP+ are also beneficial.Experience with other public cloud service providers, including AWS and Google Cloud Platform (GCP).Benefits / Perks☀️ Time Off: 25 days annual leave + public holidays🎂 Birthday Leave: One extra day off to celebrate💰 Company Pension Scheme📞 Employee Assistance Programme (EAP) for wellbeing support🏃♀️ EkcOlympics: Global team activity challenges📚 Unlimited access to Pluralsight for continuous development🌱 Real opportunities to grow, including international progressionWhy Ekco⭐️ Microsoft’s 2023 Rising Star Security Partner of the Year🚀 First Irish Microsoft MSP to achieve all four Microsoft Security Specializations🏅 Ranked 4th fastest‑growing technology company in the Deloitte Fast50 Awards🌈 A culture rooted in diversity, equality, inclusion & belonging🎉 A commitment to internal mobility and career progression✨ Flexible, family‑friendly working at the heart of our culture🔐 Proud to be your trusted security‑first Managed Service Provider chosen by IT leaders to drive operational efficiency, scale smarter and stay ahead of risk. #J-18808-Ljbffr