At Capco, we specialize in management consulting and technology transformation for the financial services industry. We combine innovative thinking with deep industry expertise to help our clients navigate complex change, deliver meaningful outcomes, and build future-ready organizations.
Our culture is entrepreneurial, collaborative, and inclusive. We empower our people to challenge the status quo, take ownership, and make an impact from day one.
As we continue to expand our Cloud and Cybersecurity capabilities, we are looking for an experienced Cloud Architect to help shape and secure enterprise-scale cloud environments.
🏢 About Capco
Capco is a global management and technology consulting firm focused on the financial services industry. We help our clients navigate complex change, deliver meaningful outcomes, and build future-ready organizations through innovative thinking and deep industry expertise.
🎯 The Role
We are looking for a highly skilled Cloud Architect to provide cloud security architecture services across enterprise AWS and Azure environments.
This role goes beyond traditional cloud architecture. You will design and implement robust defense-in-depth security frameworks, establish automated compliance guardrails, integrate advanced security platforms, and drive cloud security governance across complex environments.
Working at the intersection of Cloud Engineering, Cybersecurity, Risk, and Security Operations, you will contribute to ensuring cloud platforms remain secure, compliant, resilient, and continuously monitored.
✅ Key Responsibilities
Design, implement, and enforce security baselines and preventative guardrails across AWS and Azure environments.
Develop governance frameworks leveraging AWS Organizations, Service Control Policies (SCPs), AWS Control Tower, Azure Policy, and Azure Landing Zones.
Ensure alignment with internal security standards, regulatory requirements, and industry best practices.
Design and optimize multi-cloud logging and monitoring strategies.
Build scalable telemetry pipelines integrating AWS CloudTrail, Amazon GuardDuty, Azure Activity Logs, and Microsoft Defender for Cloud.
Enable centralized visibility through enterprise SIEM platforms such as Microsoft Sentinel and Splunk.
Support real-time threat detection, correlation, investigation, and alerting capabilities.
Define architecture and deployment strategies for EDR/XDR solutions and Cloud Workload Protection Platforms (CWPP).
Secure virtual machines, containers, Kubernetes environments, and serverless workloads across cloud platforms.
Implement and optimize Cloud Security Posture Management (CSPM) capabilities.
Establish enterprise vulnerability management processes across cloud assets.
Enable continuous security scanning for cloud misconfigurations, infrastructure vulnerabilities, container images, and operating systems.
Develop automated remediation workflows and security playbooks.
Design and enforce Zero-Trust security principles.
Strengthen Identity and Access Management (IAM) governance across cloud platforms.
Implement Just-In-Time (JIT) access, Privileged Access Management (PAM), Role-Based Access Control (RBAC), and federated identity solutions.
Evaluate, deploy, and govern best-in-class cloud security technologies.
Integrate third-party security platforms including CyberArk, Wiz, Palo Alto Prisma Cloud, and CrowdStrike.
📌 Required Qualifications
Extensive experience designing and securing enterprise-scale AWS and Azure environments.
Deep knowledge of cloud-native security services, controls, and governance frameworks.
Hands-on expertise with SIEM platforms, EDR/XDR technologies, vulnerability management solutions, and CSPM tools.
Strong experience implementing Azure Policy, AWS Control Tower, Service Control Policies (SCPs), and cloud governance frameworks.
Advanced Infrastructure as Code (IaC) skills, particularly with Terraform.
Experience embedding security controls into CI/CD and cloud deployment pipelines.
Strong understanding of modern cyber threats, MITRE ATT&CK framework, cloud attack vectors, and security monitoring and incident response processes.
Proven ability to collaborate effectively with Cloud Engineering teams, Security Operations Centers (SOC), and Risk, Compliance, and Audit functions.
Excellent stakeholder management and communication skills.
⭐ Desirable Experience
None specified.
🎁 Benefits
We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on diverse projects.
