Senior Consultant - Cloud Security Architect
by KPMG in Cybersecurity
The Senior Consultant - Cloud Security Architect is responsible for delivering high-quality cloud security consulting engagements by understanding clients’ business challenges, cloud adoption strategies, regulatory obligations, and cybersecurity threat landscape. The role focuses on advising organizations on secure cloud adoption, lift-and-shift migration strategies, and Azure landing zone security design while implementing security controls across Azure environments covering identity, networking, encryption, governance, monitoring, workload protection, logging, and cloud operations. The position supports security architecture across Microsoft Azure, Microsoft 365, AWS, and Oracle Cloud Infrastructure (OCI), helping organizations comply with cybersecurity regulations, cloud governance requirements, risk management frameworks, and security control standards. The consultant performs cloud security assessments against CIS, NIST, ISO, CAF, and cloud-provider best practices, develops cloud security governance models, operating frameworks, and transformation roadmaps, and assists clients in strengthening security controls throughout the cloud architecture stack. Responsibilities include delivering security automation, policy-as-code implementations, infrastructure-as-code security, DevSecOps practices, continuous control monitoring, security posture reporting, and risk dashboards. The role supports presales activities, proposal development, business development initiatives, and technical consulting engagements while building trusted relationships with both technical teams and executive stakeholders. The consultant contributes to KPMG's cloud security service development and professional network while demonstrating expertise in Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), Azure Policy, Defender for Cloud, RBAC, Key Vault, private endpoints, backup, workload protection, cloud migration, cloud governance, regulatory compliance, security architecture, and enterprise risk management. The ideal profile includes hands-on experience across Microsoft Azure, Microsoft 365, AWS, OCI, or GCP environments with strong knowledge of cloud security architecture, identity and access management, security automation, regulatory compliance, cloud transformation, and enterprise cybersecurity consulting. Preferred certifications include Microsoft Certified: Cybersecurity Architect Expert (SC-100), Cloud and AI Security Engineer Associate (SC-500), Identity and Access Administrator Associate (SC-300), Information Security Administrator Associate (SC-401), Azure Administrator (AZ-104), Azure Solutions Architect (AZ-305), AWS Certified Security – Specialty, AWS Certified Solutions Architect – Professional, Google Cloud Professional Cloud Security Engineer, CISSP, CISM, CCSP, SABSA, and TOGAF.