Location: Doha | Practice Area: Technology & Engineering | Type: Permanent

The Role

Capco is looking for a Security Architect to help our clients design and deliver secure, resilient cloud environments. You’ll work across business, security, architecture, engineering, risk, and technology teams to embed security into cloud transformation programmes from the outset.

This is an opportunity to tackle complex security challenges within financial services, helping clients adopt cloud technologies confidently while maintaining strong governance, regulatory compliance, and security controls.

What You’ll Do

• Designing and implementing cloud security strategies and policies that meet an organisation's specific needs.
• Design secure architectures and security patterns across public, private, and hybrid cloud environments.
• Define and implement cloud security controls, standards, guardrails, and architecture principles aligned with business and regulatory requirements.
• Work with engineering and platform teams to embed security throughout cloud infrastructure, applications, and delivery pipelines.
• Conducting regular security assessments and audits to identify vulnerabilities and develop plans to address them.
• Assess cloud security risks, identify control gaps, and provide practical recommendations that balance security, resilience, and business requirements.
• Collaborate with security, risk, architecture, and technology stakeholders to support secure cloud adoption and transformation.

What We’re Looking For

• Strong experience in cloud security architecture, cybersecurity architecture, or cloud infrastructure security.
• Practical knowledge of security architecture principles, identity and access management, encryption, network security, logging, monitoring, and cloud-native security controls.
• Experience designing security solutions across major cloud platforms such as AWS, Microsoft Azure, or Google Cloud Platform.
• Strong understanding of security frameworks, governance, risk management, regulatory requirements, and security-by-design principles.
• Knowledge of recognised cybersecurity frameworks and industry security standards.
• Experience with DevSecOps, infrastructure as code, container security, Kubernetes, or cloud security posture management.Clear communication and stakeholder management skills, with the ability to translate complex security requirements into practical architecture and engineering outcomes.