Security Solutions (Cloud) Architect

Johannesburg, South AfricaFull-timeSeniorOn-sitePosted 27 Oct 2026

Job Overview

Discovery’s Information Governance and Security (IGS) function is appointing a Security Solutions (Cloud) Architect at 1 Discovery Place, Sandton (posted 20 October 2026). The Cloud Security Architect defines, governs and guides secure cloud architectures across the Discovery Group, with Google Cloud Platform (GCP) as the primary strategic platform, while maintaining strong security and architectural oversight across AWS, Azure and hybrid on-premises environments.

The role combines security architecture ownership, cloud security consulting and engineering oversight: acting as a trusted technical advisor, the architect secures existing cloud platforms, leads secure onboarding of new cloud environments, defines enterprise cloud security baselines aligned to ISO 27001, NIST CSF and CIS Benchmarks, guides Zero Trust and DevSecOps patterns, reviews Infrastructure-as-Code (Terraform) for misconfigurations, and defines cloud identity, Kubernetes, serverless, encryption and secrets-management standards – including consulting on secure AI architectures.

Key Responsibilities

• Define and own cloud security architecture standards; act as design architect for GCP security architectures

• Design and review secure GCP, AWS and Azure landing zones with identity-driven, least-privilege access controls

• Define enterprise cloud security baselines aligned to ISO 27001, NIST CSF and CIS Benchmarks; guide Zero Trust architectures

• Provide architectural oversight of DevSecOps and secure software supply chains – secure CI/CD, automated scanning, container hardening

• Read, review and assess Infrastructure-as-Code (Terraform, cloud-native templates) and remediate security gaps

• Define secure connectivity between clouds and on-premises; support consolidation of accounts, subscriptions and tenants

• Define cloud identity architecture: federation, workload identities and privileged access models

• Guide security for Kubernetes, serverless and managed services; set encryption, key and secrets-management standards

• Participate in architecture risk reviews and produce auditable security architecture documentation

Required Qualifications

• 10+ years’ experience in IT and/or Information Security

• 5+ years in cloud security architecture or engineering; 2 years’ Layer 7 enterprise firewall experience

• Proven experience designing and governing enterprise, hybrid and multi-cloud environments

• Strong GCP, AWS and Azure experience including IAM, networking, firewalling and native security controls

• Deep understanding of IAM, network/platform security, data protection, IaC and security-as-code

• Beneficial: Google Professional Cloud Security Engineer, cloud architect certifications (GCP/AWS/Azure), CISSP or CCSP

Skills & Requirements

Cloud Security ArchitectureGoogle Cloud PlatformAWSMicrosoft AzureZero TrustDevSecOpsTerraformInfrastructure as CodeIdentity & Access ManagementKubernetes SecurityISO 27001NIST CSFCISSP