Cybersecurity Cloud Architect, hybrid in Prague

We are looking for an experienced Cybersecurity Cloud Architect to join a long-term project within a large enterprise banking environment. The successful candidate will be responsible for designing and developing cloud security architecture, supporting security implementation across multiple teams, and ensuring robust security standards across AWS, hybrid cloud environments, DevSecOps pipelines, and AI platforms.

Details

• Contract: B2B
• Start: To be agreed, potentially before 2027
• Duration: Long-term, at least until the end of 2027
• Location: Prague 4, hybrid (2–3 days onsite per week)
• Language: Czech and English

Responsibilities

• Design and develop security architecture for AWS cloud environments, including AWS landing zones
• Define security integration patterns, network architecture, IAM, and access management policies
• Design secure logging, monitoring, and cloud security governance frameworks
• Develop and maintain cloud security standards, hardening profiles, and approved cloud service catalogs
• Design and implement security solutions using Wiz Cloud and Wiz Code
• Support DevSecOps security practices, including SAST, DAST, and CSPM
• Design CSPM solutions for AWS, OpenShift 4, and Azure Kubernetes Service (AKS)
• Design and implement Google SecOps SIEM solutions and integrate security monitoring across hybrid environments
• Assess security requirements and risks associated with AI platforms, particularly Azure AI Foundry and Amazon Bedrock
• Collaborate with cloud, infrastructure, DevOps, security, and application development teams
• Present and defend architectural decisions to technical, security, and business stakeholders

Requirements

• Extensive experience in cybersecurity and security architecture within large enterprise environments
• Strong hands-on knowledge of AWS Security Architecture & Design
• Proven experience with AWS landing zones, IAM, network security, logging, and monitoring
• Solid understanding of cloud security governance and security architecture principles
• Experience designing target security architectures and defining security integration standards
• Hands-on experience developing security standards and hardening profiles
• Experience securing cloud or containerized environments
• Ability to lead security architecture initiatives and support implementation across multiple teams
• Strong communication and stakeholder management skills, including the ability to present and justify architectural decisions

Nice to Have

• Experience with Wiz Cloud and Wiz Code
• Knowledge of DevSecOps pipelines and secure software development practices
• Experience with SAST, DAST, and Cloud Security Posture Management (CSPM)
• Knowledge of OpenShift 4 and/or Azure Kubernetes Service (AKS)
• Experience with Google SecOps SIEM and SIEM implementation in hybrid environments
• Familiarity with AI platform security, particularly Azure AI Foundry and Amazon Bedrock
• Previous experience in banking, financial services, or other regulated industries
• Relevant cloud security or cybersecurity certifications