Founded and headquartered in Switzerland, Avaloq is expanding its global footprint with around 2,500 colleagues in 11 countries and more than 170 clients in 35 countries. Avaloq is a provider of wealth management technology and services for financial institutions, including private banks, wealth managers, investment managers, retail and neo banks. The Cloud Security Architect role combines cloud architecture and security engineering with automation and DevSecOps practices to help design and secure next-generation cloud platforms and services.
Tasks
- Design, govern, and continuously evolve secure cloud architectures for SaaS, PaaS, and internal platforms.
- Define and maintain cloud security standards, reusable architecture patterns, reference architectures, and security blueprints.
- Embed security-by-design principles into landing zones, tenancy structures, network segmentation, identity models, and cloud guardrails.
- Drive the adoption of Zero Trust, least-privilege, and defense-in-depth security strategies across the cloud landscape.
- Integrate security controls and compliance requirements into CI/CD pipelines, Infrastructure-as-Code (IaC), and platform automation frameworks.
- Lead or support security assessments, threat modeling, risk analysis, and architecture reviews.
- Provide architectural guidance for network security and connectivity designs across internal, SaaS, and PaaS environments.
- Partner with the Network Architecture team to define enterprise network standards and reusable architecture patterns, ensuring secure, scalable, and compliant connectivity solutions across all platforms and environments.
- Ensure alignment with regulatory, compliance, and security requirements, translating them into practical and implementable architectural solutions.
- Evaluate emerging cloud security technologies and drive continuous improvements in the organization's security posture.
- Work closely with Cloud Architects, Platform Engineers, DevOps teams, Security Operations, and Product teams.
- Provide guidance and coaching on secure cloud adoption.
- Help drive cloud transformation and modernization initiatives.
- Collaborate with engineering teams to improve automation, reliability, and operational security.
Requirements
- Master’s degree in Computer Science, Information Security, Information Technology, or a related field.
- Minimum 5 years of proven experience as an IT Security Architect, Cloud Security Architect, or in a similar senior security or architecture role.
- Experience designing and governing enterprise cloud architectures in Cloud Infrastructure (OCI preferred).
- Experience with Cloud Network Architecture, managing complex network topologies and related topics.
- Experience with risk assessments, threat modeling, security architecture reviews, and security-by-design methodologies.
- Hands-on experience with Infrastructure as Code and automation technologies such as Terraform/OpenTofu, CI/CD pipelines, GitOps, and Policy-as-Code.
- The following certifications are considered a strong advantage: CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), OCI Security Architect Professional, OCI certifications in Cloud Security and Network Architecture, equivalent architecture or cybersecurity certifications.
Benefits
- Hybrid and flexible working for most employees to maintain work life balance and continue Avaloq culture in global offices.
- Commitment to fostering an equal opportunity environment and inclusive culture.
- Hiring, compensation, and promotion regardless of origin, age, gender identity, sexual orientation, or other traits.
Bist du Teil dieses Unternehmens?
Dieses Unternehmensprofil wurde automatisch erstellt. Wenn du für Avaloq Group AG arbeitest, kannst du das Profil jetzt beanspruchen und verifizieren – kostenlos und in wenigen Minuten.
Über uns
Das Team
Championing a collaborative, supportive, and flexible work environment empowers colleagues to reach their full potential. The Cloud Security Architect will work closely with Cloud Architects, Platform Engineers, DevOps teams, Security Operations, and Product teams.