Job title: Cloud Architect
Work Setup: Hybrid, 15 St Botolph Street, London EC3A 7QU [confirm: 40% office / 60% remote, or 2 days a week onsite]
Contract End Date / Length: 28 February 2027, with possible extension
Rate: £580 per day [confirm]
Clearance Required: BPSS
Engagement: PAYE via umbrella company only
Hours: 37.5 per week
Our client in the financial services industry is looking for a Cloud Architect to define and govern the architecture of its cloud, hybrid infrastructure and security platforms. The role provides senior technical leadership across Microsoft Azure, networking, identity, security and resilience, ensuring solutions are secure, scalable and aligned with the client’s technology strategy.
What you will do:
- Define and maintain the target-state architecture for Microsoft Azure, cloud and hybrid platforms, including landing zones, networking, identity, governance and monitoring.
- Set architectural principles and guardrails covering Azure Policy, RBAC, PIM, private connectivity and platform governance.
- Define the target-state architecture for hybrid infrastructure and its integration with Azure, including Active Directory, Entra ID, DNS, DHCP and PKI.
- Define secure network architecture across cloud and hybrid environments, aligned with Zero Trust principles.
- Define security architecture patterns across cloud, identity, network and infrastructure, including Microsoft Defender, Sentinel, Conditional Access and Key Vault.
- Define architecture patterns for availability, resilience, backup and disaster recovery, and identify single points of failure.
- Act as a key member of the Technology Design Authority, providing design assurance for technology solutions and major changes.
- Maintain architecture principles, standards, decision records and documentation.
- Contribute to cloud, infrastructure, network and security roadmaps, including migration, modernisation and transition architectures.
- Provide architectural direction for Infrastructure as Code and automated provisioning, including Terraform and Azure DevOps.
- Assess emerging technologies, including AI-enabled services, and their architecture and security implications.
- Provide architecture input into technology investment decisions and clear recommendations to senior stakeholders.
What we’re looking for:
- CCSP, CISSP or an equivalent industry-recognised cloud or security certification.
- Strong knowledge of Microsoft Azure architecture across networking, identity, security, compute, storage, monitoring and governance.
- Strong knowledge of Azure landing zones, management groups, Azure Policy, RBAC, PIM and cloud governance.
- Strong enterprise networking and security knowledge, including routing, segmentation, firewalls, VPNs and private connectivity.
- Advanced knowledge of Active Directory, Entra ID, Conditional Access, MFA, SSO and certificates.
- Strong understanding of Defender, Sentinel, Zero Trust and cloud security architecture.
- Strong understanding of hybrid infrastructure, resilience, backup and disaster recovery.
- Extensive experience designing and assuring cloud, security and hybrid architectures in complex enterprise environments, ideally in a senior architecture role.
- Experience with architecture governance, design assurance, reference architectures and technical standards.
- Experience supporting cloud migration, modernisation and transformation, ideally in a regulated environment.
- Experience with Infrastructure as Code, including Terraform and Azure DevOps.
- Strong communication, influencing and stakeholder-management skills.
- Microsoft Certified: Azure Solutions Architect Expert, or equivalent.
- TOGAF or equivalent architecture framework knowledge.
- Microsoft Azure Security Engineer, CCNP or HashiCorp Terraform Associate certification.
- Experience with FinOps and cloud cost optimisation.
- Knowledge of AI governance and responsible AI.
Candidates must be legally authorized to live and work in the country where the position is based, without requiring employer sponsorship.
HelloKindred is committed to fair, transparent, and inclusive hiring practices. We assess candidates based on skills, experience, and role-related requirements.
We appreciate your interest in this opportunity. While we review every application carefully, only candidates selected for an interview will be contacted.
HelloKindred is an equal opportunity employer. We welcome applicants of all backgrounds and do not discriminate on the basis of race, colour, religion, sex, gender identity or expression, sexual orientation, age, national origin, disability, veteran status, or any other protected characteristic under applicable law.