Cloud Architect – Security & Guardrails (AWS/Azure)

<p><strong>CAPCO POLAND </strong></p> <p><strong>*We are looking for Poland based candidate. </strong></p> <p> </p> <div> <p>At Capco, we specialize in management consulting and technology transformation for the financial services industry. We combine innovative thinking with deep industry expertise to help our clients navigate complex change, deliver meaningful outcomes, and build future-ready organizations.</p> <p>Our culture is entrepreneurial, collaborative, and inclusive. We empower our people to challenge the status quo, take ownership, and make an impact from day one.</p> <p>As we continue to expand our Cloud and Cybersecurity capabilities, we are looking for an experienced <strong>Cloud Architect – Security & Guardrails (AWS/Azure)</strong> to help shape and secure enterprise-scale cloud environments.</p> <p> </p> </div> <p><strong>ROLE OVERVIEW:</strong></p> <div> <p>We are looking for a highly skilled Cloud Architect to provide cloud security architecture services across enterprise AWS and Azure environments.</p> <p>This role goes beyond traditional cloud architecture. You will design and implement robust <strong>defense-in-depth security frameworks</strong>, establish automated compliance guardrails, integrate advanced security platforms, and drive cloud security governance across complex environments.</p> <p>Working at the intersection of Cloud Engineering, Cybersecurity, Risk, and Security Operations, you will contribute to ensuring cloud platforms remain secure, compliant, resilient, and continuously monitored.</p> <p> </p> </div> <p><strong>KEY RESPONSIBILITIES: </strong></p> <ul> <li> <div> <h3>Cloud Security Governance & Guardrails</h3> <ul> <li>Design, implement, and enforce security baselines and preventative guardrails across AWS and Azure environments.</li> <li>Develop governance frameworks leveraging: <ul> <li>AWS Organizations</li> <li>Service Control Policies (SCPs)</li> <li>AWS Control Tower</li> <li>Azure Policy</li> <li>Azure Landing Zones</li> </ul> </li> <li>Ensure alignment with internal security standards, regulatory requirements, and industry best practices.</li> </ul> <h3>SIEM, Monitoring & Logging Architecture</h3> <ul> <li>Design and optimize multi-cloud logging and monitoring strategies.</li> <li>Build scalable telemetry pipelines integrating: <ul> <li>AWS CloudTrail</li> <li>Amazon GuardDuty</li> <li>Azure Activity Logs</li> <li>Microsoft Defender for Cloud</li&g