Cloud & AI Security Architect

Job Overview

We are seeking a Senior AI & Azure Security Architect to design and deliver secure cloud and AI solutions in a regulated environment. The role requires strong expertise across Azure security, AI security and governance, identity, endpoint security, data protection and security monitoring, along with the ability to engage confidently with senior stakeholders.

Key Responsibilities

• Design and implement secure Azure architectures, including Landing Zones, hub-and-spoke networking, NSGs, Azure Firewall, Private Endpoints, Bastion and Azure Policy.
  

• Secure AI tools and agents including Microsoft Copilot, Claude and GitHub Copilot, with focus on prompt injection, MCP and connector security.
  

• Develop AI security and governance aligned with OWASP, NIST AI RMF and ISO 42001, including UK GDPR and DPIA requirements.
  

• Design identity solutions using Entra ID, Conditional Access, PIM, managed identities and RBAC across multiple tenants.
  

• Secure Azure Virtual Desktop/Windows 365, Intune and Defender for Endpoint, including clipboard, drive and USB controls.
  

• Implement Microsoft Purview, DLP, Defender for Storage and secure file-transfer controls.
  

• Develop monitoring and security solutions using Microsoft Sentinel, Log Analytics and Defender for Cloud.
  

• Automate security infrastructure using Bicep or Terraform.
  

• Lead and mentor engineers and communicate architecture and security recommendations to senior client stakeholders.
  

Requirements

Required Experience

• 10+ years in IT/Security, including 5+ years in Azure security architecture.
  

• Experience in a regulated industry, ideally UK financial services or insurance.
  

• Strong understanding of AI security, cloud security, identity, endpoint and data protection.
  

• SC-500 or AZ-500, or willingness to obtain SC-500 within 6 months.
  

• Strong communication, leadership and client-facing skills.
  

Desirable

• SC-100, AZ-140 or SC-300.
  

• CISSP or IAPP AIGP.
  

• Consulting/client-facing experience.