inhousefyi
← Back to listings

Cloud Architect – Security & Guardrails (AWS/Azure)

CapcoWarsaw, Poland · Posted 1 month ago
Full-timeEst. 120,000 PLN
Apply now

Description

CAPCO POLAND

*We are looking for Poland based candidate.

At Capco, we specialize in management consulting and technology transformation for the financial services industry. We combine innovative thinking with deep industry expertise to help our clients navigate complex change, deliver meaningful outcomes, and build future-ready organizations.

Our culture is entrepreneurial, collaborative, and inclusive. We empower our people to challenge the status quo, take ownership, and make an impact from day one.

As we continue to expand our Cloud and Cybersecurity capabilities, we are looking for an experienced Cloud Architect – Security & Guardrails (AWS/Azure) to help shape and secure enterprise-scale cloud environments.

ROLE OVERVIEW:

We are looking for a highly skilled Cloud Architect to provide cloud security architecture services across enterprise AWS and Azure environments.

This role goes beyond traditional cloud architecture. You will design and implement robust defense-in-depth security frameworks, establish automated compliance guardrails, integrate advanced security platforms, and drive cloud security governance across complex environments.

Working at the intersection of Cloud Engineering, Cybersecurity, Risk, and Security Operations, you will contribute to ensuring cloud platforms remain secure, compliant, resilient, and continuously monitored.

KEY RESPONSIBILITIES:

  • Cloud Security Governance & Guardrails

    • Design, implement, and enforce security baselines and preventative guardrails across AWS and Azure environments.
    • Develop governance frameworks leveraging:
      • AWS Organizations
      • Service Control Policies (SCPs)
      • AWS Control Tower
      • Azure Policy
      • Azure Landing Zones
    • Ensure alignment with internal security standards, regulatory requirements, and industry best practices.

    SIEM, Monitoring & Logging Architecture

    • Design and optimize multi-cloud logging and monitoring strategies.
    • Build scalable telemetry pipelines integrating:
      • AWS CloudTrail
      • Amazon GuardDuty
      • Azure Activity Logs
      • Microsoft Defender for Cloud
    • Enable centralized visibility through enterprise SIEM platforms such as:
      • Microsoft Sentinel
      • Splunk
    • Support real-time threat detection, correlation, investigation, and alerting capabilities.

    Endpoint & Workload Protection

    • Define architecture and deployment strategies for:
      • EDR/XDR solutions
      • Cloud Workload Protection Platforms (CWPP)
    • Secure virtual machines, containers, Kubernetes environments, and serverless workloads across cloud platforms.
    • Collaborate with Security Operations teams to enhance threat detection and response.

    Vulnerability & Security Posture Management

    • Implement and optimize Cloud Security Posture Management (CSPM) capabilities.
    • Establish enterprise vulnerability management processes across cloud assets.
    • Enable continuous security scanning for:
      • Cloud misconfigurations
      • Infrastructure vulnerabilities
      • Container images
      • Operating systems
    • Develop automated remediation workflows and security playbooks.

    Identity & Access Security

    • Design and enforce Zero-Trust security principles.
    • Strengthen Identity and Access Management (IAM) governance across cloud platforms.
    • Implement:
      • Just-In-Time (JIT) access
      • Privileged Access Management (PAM)
      • Role-Based Access Control (RBAC)
      • Federated identity solutions
    • Partner with security stakeholders to reduce privileged access risks.

    Security Technology Integration

    • Evaluate, deploy, and govern best-in-class cloud security technologies.
    • Integrate third-party security platforms including:
      • CyberArk
      • Wiz
      • Palo Alto Prisma Cloud
      • CrowdStrike
      • Other strategic security tooling
    • Drive consistent security controls and operational excellence across the cloud ecosystem.

REQUIRED QUALIFICATIONS:

  • Extensive experience designing and securing enterprise-scale AWS and Azure environments.Deep knowledge of cloud-native security services, controls, and governance frameworks.Hands-on expertise with:
    • SIEM platforms
    • EDR/XDR technologies
    • Vulnerability management solutions
    • CSPM tools
    Strong experience implementing:
    • Azure Policy
    • AWS Control Tower
    • Service Control Policies (SCPs)
    • Cloud governance frameworks
    Advanced Infrastructure as Code (IaC) skills, particularly with Terraform.Experience embedding security controls into CI/CD and cloud deployment pipelines.Strong understanding of:
    • Modern cyber threats
    • MITRE ATT&CK framework
    • Cloud attack vectors
    • Security monitoring and incident response processes
    Proven ability to collaborate effectively with:
    • Cloud Engineering teams
    • Security Operations Centers (SOC)
    • Risk, Compliance, and Audit functions
    Excellent stakeholder management and communication skills.


We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on diverse projects.

Recruitment Process:

  1. HR Interview with the recruiter
  2. Technical Interview
  3. Client Interview
  4. Feedback and offer

#LI-HYBRID

Similar jobs

CapcoCracow, Poland

Est. 120,000 PLN

CAPCO POLAND *We are looking for Poland based candidate. At Capco Poland, we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and ma…

Full-time
CapcoWarsaw, Poland

Est. 120,000 PLN

System Architect Work model: Warsaw preferred. Hybrid work model – 2 days per week from the office. At Capco, we specialize in management consulting and technology transformation for the financial services industry. We c…

Full-time
CapcoRemote

Est. 120,000 PLN

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliv…

Full-timeRemote
CapcoRemote

Est. 120,000 PLN

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliv…

Full-timeRemote
CapcoWarsaw, Poland

Est. 120,000 PLN

Solutions Architect (Core Banking) About Us At Capco, we specialize in management consulting and technology transformation for the financial services industry. We combine innovative thinking with deep industry expertise…

Full-time
CapcoWarsaw, Poland

Est. 120,000 PLN

CAPCO POLAND *We are looking for Poland based candidate. Hybrid work – 3 days in the Warsaw office. WHY JOIN CAPCO? Capco is a global technology and management consultancy focused on financial services. We partner with l…

Full-time
AI Developer20 days ago
CapcoRemote

Est. 120,000 PLN

CAPCO POLAND * We are looking for Poland based candidate. At Capco Poland, we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and m…

Full-timeRemote
CapcoBrussels, Belgium

Est. 80,000 EUR

Join Us as a Cybersecurity Consultant – Transforming the Future of Financial Services What Makes Capco Unique? Capco is a global technology and management consultancy specializing in driving digital transformation across…

Full-time
CapcoWarsaw, Poland

Est. 120,000 PLN

CAPCO POLAND We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on innovative AI and automation initiatives for leading financial institutions. Capco Poland is a global technolo…

Full-time
CapcoLondon, United Kingdom

Est. 120,000 GBP

Principal Architect: Microsoft Azure Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Shape and lead transformative Microsoft Azure initiatives across financial services. About Ca…

Full-time
CapcoWarsaw, Poland

Est. 84,000 PLN

CAPCO POLAND We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on innovative AI and automation initiatives for leading financial institutions. At Capco Poland, we're not just a…

Full-time
CapcoLondon, United Kingdom

Est. 120,000 GBP

Principal Architect: Amazon Web Services (AWS) Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Shape and lead transformative AWS initiatives across financial services. About Capc…

Full-time
CapcoWarsaw, Poland

Est. 84,000 PLN

CAPCO POLAND We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on innovative AI and automation initiatives for leading financial institutions. Capco Poland is a global technolo…

Full-time
CapcoWarsaw, Poland

Est. 60,000 PLN

(HYBRID) Capco is a global management and technology consultancy focused on the financial services industry. We are looking for an experienced Talent Acquisition Specialist to join our Talent Acquisition team in Warsaw.…

Full-time
CapcoWarsaw, Poland

Est. 84,000 PLN

CAPCO POLAND We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on innovative AI and automation initiatives for leading financial institutions. At Capco Poland, we're not just a…

Full-time
CapcoCracow, Poland

Est. 120,000 PLN

AI Fullstack Engineer Poland ABOUT US Capco is seeking experienced and motivated AI Engineers to help design, build, and deploy AI-enabled solutions for clients in the financial services industry. As part of this engagem…

Full-time
CapcoCracow, Poland

Est. 120,000 PLN

CAPCO POLAND* We're looking for Poland-based candidates. Capco Poland is a leading global technology and management consultancy, dedicated to driving digital transformation across the financial services industry. Our pas…

Full-time
CapcoWarsaw, Poland

Est. 120,000 PLN

CAPCO POLAND CAPCO POLAND We are looking for a Poland-based candidate. This is hybrid role 1-2 times from Kraków office per month. We offer a flexible collaboration model based on a B2B contract, with the opportunity to…

Full-time
CapcoDallas, Texas, United States

Est. 125,000 USD

Project Manager – Cyber Security (CyberArk)Location: Dallas, Texas (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent Lead enterprise CyberArk transformation initiatives that strengthen security, re…

Full-time
CapcoWarsaw, Poland

Est. 120,000 PLN

CAPCO POLAND Capco Poland is a global technology and management consultancy specializing in driving digital transformation across the financial services industry. We are passionate about helping our clients succeed in an…

Full-time
CapcoWarsaw, Poland

Est. 120,000 PLN

Senior Data Migration Specialist About the Project We are looking for an experienced Senior Data Migration Specialist to provide expertise on a large-scale transformation programme within the financial services sector. T…

Full-time
CapcoBangkok, Thailand

Capco, a Wipro company, is a global technology and management consultancy specializing in driving digital transformation in the financial services industry. With a growing client portfolio comprising of over 100 global o…

Full-time
CapcoWarsaw, Poland

Est. 84,000 PLN

System Analyst – Authorization Host / SWITCH / POS Handling / E-commerce CAPCO POLAND Capco Poland is a global technology and management consultancy specializing in driving digital transformation across the financial ser…

Full-time
CapcoBrussels, Belgium

Est. 80,000 EUR

About Capco Capco is a global business and technology consultancy specializing in the financial services and energy industries. We bring together industry knowledge, technology expertise, and an innovative mindset to sup…

Full-time
Mid PMO4 months ago
CapcoCracow, Poland

Est. 120,000 PLN

CAPCO POLAND We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on innovative AI and automation initiatives for leading financial institutions. Capco Poland is a global technolo…

Full-time
CapcoEdinburgh, Scotland, United Kingdom

Est. 80,000 GBP

Operational Resilience & Cyber Risk Consultant - all levelsLocation: Glasgow & Edinburgh (Hybrid) | Practice Area: Financial Crime, Risk, Regulation, Finance Transformation | Type: Permanent Build resilience wher…

Full-time
CapcoBrussels, Belgium

Est. 80,000 EUR

About the Team Joining Capco means joining an organization that is committed to an inclusive working environment where you are encouraged to #BeYourselfAtWork. Capco ICT RISK is a multi-faceted team focused on the evalua…

Full-time
CapcoWarsaw, Poland

Est. 84,000 PLN

CAPCO POLAND We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on innovative AI and automation initiatives for leading financial institutions. Capco Poland is a global technolo…

Full-time
CapcoWarsaw, Poland

Est. 120,000 PLN

CAPCO POLAND At Capco Poland, we’re not just another consultancy - we’re the spark behind digital transformation in the financial world. As a global leader in technology and management consulting, we thrive on helping cl…

Full-time
CapcoWarsaw, Poland

Est. 84,000 PLN

CAPCO POLAND * We are looking for Poland based candidate. * This role is hybrid and may require working from the office in Warsaw. At Capco Poland, we’re not just another consultancy - we’re the spark behind digital tran…

Full-time