Sovereign Cloud Security Architect

Quick Facts

• Role: Sovereign Cloud Security Architect

• Contract: B2B; initial 6-month engagement with likely extension

Description

You will own the technical responsibility for Digital Sovereignty Assessments, analyzing clients’ cloud environments (access, key management, telemetry, and control-plane ownership) and evaluating solutions against European regulatory and sovereignty frameworks (e.g., SEAL, BSI C3A, SecNumCloud, C5). You will recommend target security architectures, including key-management and custody models, and present assessment results to executive and technical stakeholders while collaborating with data governance and AI experts.

Responsibilities

• Assess cloud environments (Azure, AWS, GCP, and European providers) for key-custody controls and dependencies, including administrative IAM/access paths, support telemetry paths, and control-plane ownership

• Classify and audit cloud solutions according to SEAL, BSI C3A, SecNumCloud, and C5; present findings to senior stakeholders

• Review and design key-management architectures (e.g., HYOK), external key management, and integration of HSM modules (e.g., Thales CipherTrust)

• Recommend target-state architectures and provider options (hyperscaler sovereignty offerings and European cloud providers)

• Define technology constraints in digital sovereignty roadmaps, specifying which technologies meet each security level and why

• Create reusable analytical assets such as checklists, reference architectures, and assessment templates

• Work closely with cloud, security, and delivery teams to ensure smooth implementation of recommendations

Requirements

• Minimum 8 years of experience in cloud architecture or security, including hands-on security experience with at least one hyperscaler (IAM, encryption, key management, networking, logging)

• Strong analytical ability to read audit reports and understand vendor certification documentation and scope (C5, SOC 2, SecNumCloud)

• CCSP or CISSP (or documented equivalent experience in cloud security at a comparable level)

• Fluent English and documented experience facilitating technical workshops with senior leadership and key stakeholders

Benefits

• Stable B2B cooperation on an international strategic project (6 months, with a high probability of long-term continuation)

• Real impact on security architecture for major European and global enterprises

• Work in a highly qualified, multidisciplinary expert team across Data Governance, AI, and Cloud

• Exposure to cutting-edge cloud technologies (hyperscalers and local providers) and advanced security solutions

• Collaborative, partner-like approach with high autonomy in recommending and implementing architectural solutions