Senior Security Architect – Secure‑by‑Design Lead

About the role

VOIS is looking for an experienced Security Architect to embed secure‑by‑design principles across its products, platforms and services. The role combines hands‑on engineering, architecture design and close collaboration with cross‑functional teams to raise the organisation’s security posture.

Key responsibilities

• Integrate secure‑by‑design frameworks and actionable security configurations into data and analytics platforms and engineering workflows.
• Conduct architecture risk assessments, lead threat‑modelling sessions and guide remediation through implemented controls.
• Define and maintain secure reference architectures for cloud platforms, SaaS, APIs, micro‑services and data ecosystems.
• Lead enterprise‑wide threat‑modelling programmes for distributed, cloud‑native and supply‑chain environments.
• Design security architectures for multi‑cloud, Kubernetes and Zero Trust identity‑first models.
• Enable DevSecOps adoption by defining secure CI/CD pipelines, Infrastructure as Code, automated testing and supply‑chain protection.
• Provide expert guidance to senior engineering stakeholders on security risks, emerging technologies and architectural trade‑offs.

Required profile

• 12–16 years of cybersecurity experience, including 7+ years in security architecture.
• Proven experience designing enterprise security architecture frameworks, secure design patterns and reference architectures.
• Strong background in cloud security (AWS, Azure, GCP), container security and Kubernetes platforms.
• Deep knowledge of Zero Trust and identity‑centric security models.
• Experience with Secure SDLC, API security and software supply‑chain protection.
• Ability to perform advanced threat modelling for distributed and cloud‑native environments.

Required skills

• AWS
• Azure
• GCP
• Kubernetes
• Zero Trust
• Secure SDLC
• API security
• Software supply chain protection
• Threat modelling
• Risk management
• Cryptographic architecture
• Data protection

What we offer

• Opportunity to work on large‑scale enterprise security transformations within a global organisation.
• Exposure to advanced cloud, Zero Trust and DevSecOps practices.
• Collaboration with diverse, cross‑functional teams across technology and business domains.
• Platform to influence security strategy and architectural decisions at scale.
• Continuous learning and development in emerging cybersecurity domains.