Sovereign Cloud Security Architect

In4ge is a recruitment company cooperating with a global technology and strategic consultancy firm conducting a Sovereign Cloud Security Architect role for a pioneering project serving sectors such as pharmaceuticals, energy, and the public sector.

• Minimum 8 years in cloud architecture or security, with hands-on experience in hyperscaler security areas (IAM, encryption, key management, networking, logging).
• Proficient in analyzing audit reports and certification documentation (C5, SOC 2, SecNumCloud) with full understanding of certification scopes.
• Possess or demonstrate equivalent expertise to CISSP or CCSP certifications.
• Fluent in English and experienced in conducting technical workshops with management and senior stakeholders.

Nice to have:

• Knowledge and experience with European digital sovereignty frameworks (SEAL, BSI C3A).
• Certifications such as Azure SC-100 or AWS Security Specialty.
• Experience with platforms based on OpenStack or Kubernetes, and European cloud providers.
• Knowledge of French or German languages.

• Assess cloud environments (Azure, AWS, GCP, European providers) for controls and dependencies including key custody, identity and access management, support pathways, telemetry, and control-plane ownership.
• Classify and audit cloud solutions according to frameworks: SEAL, BSI C3A, SecNumCloud, C5, presenting findings to senior stakeholders.
• Review and design key management architectures such as HYOK, external key management, and HSM module integration (e.g., Thales CipherTrust).
• Recommend target architectures and provider options, including hyperscalers (Microsoft Cloud for Sovereignty, AWS European Sovereign Cloud) and European providers (OVHcloud, StackIT, T-Systems, Beyond.pl, S3NS, Bleu).
• Define technological constraints in digital sovereignty roadmaps specifying compliant technology stacks.
• Create reusable analytical materials including checklists, reference architectures, and assessment templates.
• Collaborate closely with cloud, security, and delivery teams to ensure smooth implementation of recommended solutions.

The data controller is in4ge sp. z o.o. with rights to access, rectify, erase, restrict processing, object to processing, data portability, and complaint submission. Personal data processing is for recruitment purposes, obligatory under labor law for some data, voluntary for others. Data processed until recruitment ends or consent withdrawal. Data recipients include Just Join IT and partners involved in recruitment.