At a Glance
- Tasks: Lead the design and delivery of cloud security solutions in a dynamic Azure environment.
- Company: Join RBC Brewin Dolphin, a leader in global cyber security.
- Benefits: Enjoy competitive pay, flexible benefits, and a supportive work culture.
- Other info: Collaborative team environment with excellent career growth opportunities.
- Why this job: Make a real impact on cloud security while working with cutting-edge technology.
- Qualifications: Deep expertise in cloud security architecture and hands-on experience with Azure.
The predicted salary is between 80000 - 100000 £ per year.
The Principal Cloud Security Architect will lead the design, engineering, and delivery of cloud security solutions across RBC's Azure enterprise environment. This role owns end-to-end security architecture and hands-on implementation, drives enterprise-scale operationalisation of cloud security capabilities, embeds security into CI/CD pipelines and infrastructure-as-code, and partners with Regulatory, Compliance, and Audit functions to ensure controls meet regulatory frameworks and industry standards.
The ideal candidate combines deep technical expertise with strategic leadership—equally comfortable whiteboarding architecture, writing the Terraform to implement it, and guiding teams through complex security transformations at scale.
This is a permanent, full-time role and requires 4 days at our 10 Fenchurch Avenue, London office.
What will you do?
- Strategic Leadership & Architecture
- Lead efforts to secure Azure cloud platform at RBC Brewin Dolphin, serving as the primary security subject matter expert for Azure-native services, identity, networking, and data protection controls.
- Lead, execute, and deliver on Cloud Security strategy and initiatives with measurable outcomes.
- Build, innovate, and mature Cloud Security Capabilities at RBC Brewin Dolphin.
- Lead the development of end-to-end technical cloud security design and architecture to ensure safe application on-boarding to meet sponsor/stakeholder needs, without impacting planned time to market timelines.
- Conduct threat modeling, security architecture assessments, and cloud service security reviews to ensure alignment with industry best practices and RBC's risk appetite.
- Hands-On Technical Implementation
- Architect and drive security strategy for Azure Kubernetes Service (AKS) and OpenShift Container Platform, including cluster hardening, admission control, runtime security, image assurance, network policy, secrets management, and workload identity.
- Define and implement security controls for Azure infrastructure supporting AI/ML workloads, including compute provisioning, networking, storage, identity, and platform services (Microsoft Foundry/Azure OpenAI Service, Azure Machine Learning).
- Lead the enterprise deployment and operationalisation of Wiz CNAPP, including CSPM, CWPP, CIEM, DSPM, and container/Kubernetes security capabilities—driving policy-as-code, risk prioritisation, and remediation workflows at scale.
- Embed security into CI/CD pipelines and software supply chain (GitHub Actions, Terraform, ArgoCD, Helm) through automated scanning, policy enforcement, IaC security validation, and shift-left developer tooling.
- Automation & Controls Development
- Lead and build preventative and detective controls/measures according to RBC Brewin Dolphin's cloud control objectives while using modern automation, config as code, and TDD principles to bring reliability.
- Lead and build automated reporting and monitoring solutions to provide feedback to developers and help them shift left and recognise security gaps early.
- Experience in hardening and safeguarding cloud services and preventing config drift with native or third-party tools (CSPM, IaaC, linter).
- Architect, engineer, and deploy cloud security solutions end-to-end—owning the full lifecycle from design through implementation, testing, and production delivery.
- Collaboration & Governance
- Partner with Regulatory, Compliance, and Audit teams to ensure cloud security controls satisfy industry standards, SOX, PCI-DSS, and internal risk frameworks—translating regulatory expectations into technical control implementations and evidence automation.
- Communicate and collaborate with application developers to remediate security vulnerabilities for their applications and/or resources.
- Work with cloud stakeholders to design, build, and validate Cloud Security controls.
- Ability to partner effectively with key stakeholders on complex projects with excellent communication, facilitation, and presentation skills.
What do you need to succeed?
Must-have
- Demonstrable experience in Cyber Security, with a focus on cloud security architecture and engineering.
- Deep hands-on expertise with Microsoft Azure security (Defender for Cloud, Entra ID, Azure Policy, Network Security Groups, Private Link, Key Vault).
- Strong knowledge and experience of cloud security frameworks and governance practices with extensive hands-on experience with Azure cloud platform.
- Strong experience securing Kubernetes at scale with AKS and/or OpenShift Container Platform—including admission controllers, OPA/Gatekeeper/Kyverno, service mesh security, and runtime protection.
- Hands-on experience with Wiz CNAPP (or equivalent CNAPP platform) in a large enterprise environment, including policy authoring, risk scoring, and integration with ticketing/remediation workflows.
- Experience securing CI/CD pipelines and infrastructure-as-code—GitHub Actions, Terraform (including Sentinel/OPA policy), container image pipelines, artifact signing, and SBOM generation.
- Demonstrated ability to operate as both a security architect and hands-on practitioner—willing to roll up sleeves and write IaC, policy-as-code, automation scripts, or pipeline configurations when needed.
- Demonstrated experience making architectural decisions based on simplicity, industry frameworks, scalability, and reusability.
- Ability to partner effectively with key stakeholders on complex programs with excellent communication, facilitation, and presentation skills.
Nice-to-have
- Experience securing Azure infrastructure for AI/ML workloads—GPU-enabled VMs/node pools, high-bandwidth networking, large-scale storage, and managed AI platform services from a compute, network, and identity perspective.
- Recognisable security-related industry certifications (CISSP, CCSP, CCSK, OSCP).
- Azure security certifications (SC-500, SC-100).
- Kubernetes certifications (CKA, CKS) or Wiz certifications.
What is in it for you?
We thrive on the challenge to be our best - progressive thinking to keep growing and working together to deliver trusted advice to help our clients thrive and communities prosper. We care about each other, reaching our potential, making a difference to our communities, and achieving success that is mutual.
- A comprehensive Total Rewards Program including bonuses, flexible benefits and competitive compensation.
- Leaders who support your development through coaching and managing opportunities.
- Opportunities to work with the best in the field.
- Ability to make a difference and lasting impact.
- Work in a dynamic, collaborative, progressive, and high-performing team.
- A world-class training program in financial services.
Principal, Cloud Security Architect (Director Level), Global Cyber Security, RBC Brewin Dolphin (London) employer: Royal Bank of Canada
RBC Brewin Dolphin is an exceptional employer that fosters a dynamic and collaborative work culture, where innovation and professional growth are at the forefront. Located in the heart of London, employees benefit from a comprehensive Total Rewards Program, including competitive compensation and flexible benefits, alongside opportunities to work with industry leaders in a high-performing team. With a commitment to inclusivity and support for personal development, RBC empowers its employees to make a meaningful impact within the organisation and the wider community.
StudySmarter Expert Advice🤫
We think this is how you could land Principal, Cloud Security Architect (Director Level), Global Cyber Security, RBC Brewin Dolphin (London)
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, especially those who work at RBC or have insights into cloud security. A friendly chat can sometimes lead to job opportunities that aren't even advertised.
✨Tip Number 2
Prepare for the interview by brushing up on your technical skills. Be ready to discuss Azure security, Kubernetes, and CI/CD pipelines in detail. We want you to showcase your hands-on experience and strategic thinking!
✨Tip Number 3
Don’t forget to ask questions during the interview! Show your interest in RBC's cloud security initiatives and how you can contribute. This not only demonstrates your enthusiasm but also helps you gauge if the role is the right fit for you.
✨Tip Number 4
Apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you're serious about joining the team at RBC Brewin Dolphin.
We think you need these skills to ace Principal, Cloud Security Architect (Director Level), Global Cyber Security, RBC Brewin Dolphin (London)
Some tips for your application 🫡
Tailor Your Application:Make sure to customise your CV and cover letter to highlight your experience with Azure security and cloud architecture. We want to see how your skills align with the specific requirements of the Principal Cloud Security Architect role.
Showcase Your Hands-On Experience:Don’t just list your qualifications—give us examples of your hands-on work with Terraform, CI/CD pipelines, and Kubernetes. We love seeing real-world applications of your skills, so share those success stories!
Be Clear and Concise:Keep your application straightforward and to the point. Use bullet points for easy reading and make sure to clearly outline your achievements in cloud security. We appreciate clarity as it helps us understand your journey better.
Apply Through Our Website:We encourage you to submit your application through our website. It’s the best way to ensure your application gets into the right hands and allows us to process it efficiently. Plus, it shows you’re serious about joining our team!
How to prepare for a job interview at Royal Bank of Canada
✨Know Your Cloud Security Inside Out
Make sure you brush up on your knowledge of Azure security features and cloud security frameworks. Be ready to discuss specific tools like Defender for Cloud and Wiz CNAPP, as well as how you've implemented security controls in past roles.
✨Showcase Your Hands-On Experience
Prepare to share examples of your hands-on work with Terraform, CI/CD pipelines, and Kubernetes security. Highlight any projects where you’ve successfully embedded security into the development process, as this will demonstrate your practical skills.
✨Communicate Clearly and Confidently
Since this role involves collaboration with various teams, practice articulating complex security concepts in a straightforward manner. Use examples from your experience to illustrate how you’ve effectively communicated with stakeholders in the past.
✨Prepare for Scenario-Based Questions
Expect scenario-based questions that assess your problem-solving skills in real-world situations. Think about challenges you've faced in cloud security and how you overcame them, especially regarding compliance and regulatory requirements.
