Lead Cloud Security Architect

Description:

We are currently seeking an experienced professional to join our team in the role of Lead Cloud Security Architect – AWS.
HSBC operates a ‘Cloud First’ strategy - we strongly believe that the future of our infrastructure is on the Cloud, both Public and Private to accelerate our business capabilities. We are looking for a step change in how we can leverage approved Cloud Services in a seamless way and the Lead Cloud Security Architect role is essential to ensure the secure and effective enablement of AWS for the business. This is achieved through the creation of the AWS Foundation Platform which forms the basis of AWS adoption within the organisation. Under the guidance of the Principal Cloud Platform Architect, the Lead Cloud Security Architect is part of a core team who provide leadership and direction to the HSBC AWS Foundation Platform and who are responsible for the high-level implementation and delivery approach of the platform.

As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.




In this role you will:

• Enable project teams in designing secure architectures for cloud environments and infrastructure
• Create security baselines for cloud resources according to security frameworks and standards
• Identify and gather project-specific requirements, and embed them into environments and security control design
• Collaborate across all organisations in HSBC to identify, deliver, and document the required artifacts to enable movement of applications and data to the cloud, including strategy, target state, technical roadmaps, position statements, concepts, and logical specifications
• Provide a detailed understanding of cloud security and cloud infrastructure services, threat landscape and attack scenario’s, risks
• Be hands-on, directly interacting with the engineering and application development teams and provide leadership to drive alignment on security requirements, influence decision makers, build relationships, and communicate strategy and architecture to the broader internal community
• Define and drive to target state architecture for the cloud security
• Provide guidance on how to best secure containers and microservice architectures

Requirements

To be successful in this role you should meet the following requirements:

• Cloud security architecture experience (required, advanced level)
• Proficiency in Security for Cloud particularly for AWS
• Deep knowledge of broader cloud technology portfolio and solutions
• Cloud security architecture experience and understanding of well architected frameworks
• Ability to provide direction and guidance on architectural use cases and requirements
• Ability to produce hardened configuration standards for cloud services
• Threat modeling experience
• Preferred experience with one or more general purpose programming languages including but not limited to: PowerShell scripting, Java, C/C++, Python, JavaScript and understanding of software vulnerabilities
• Hands on experience with Terraform, python or other orchestration tooling

This role is based in Sheffield or Edinburgh .