--- title: 'Cloud Architect – Security & Guardrails (AWS/Azure) at Capco' canonical: 'https://feeny.ai/job/cloud-architect-security-guardrails-aws-azure-capco-warsaw-2rze0vw5x556' type: 'job' last_seen: '2026-09-14' --- # Cloud Architect – Security & Guardrails (AWS/Azure) at Capco - **Company:** Capco - **Location:** Warsaw, Poland - **Posted:** 2026-07-03 - **Last confirmed live:** 2026-09-14 - **Apply:** https://job-boards.greenhouse.io/capco/jobs/8045147 ## Job description ## CAPCO POLAND *We are looking for Poland based candidate. At Capco, we specialize in management consulting and technology transformation for the financial services industry. We combine innovative thinking with deep industry expertise to help our clients navigate complex change, deliver meaningful outcomes, and build future-ready organizations. Our culture is entrepreneurial, collaborative, and inclusive. We empower our people to challenge the status quo, take ownership, and make an impact from day one. As we continue to expand our Cloud and Cybersecurity capabilities, we are looking for an experienced Cloud Architect – Security & Guardrails (AWS/Azure) to help shape and secure enterprise-scale cloud environments. ## ROLE OVERVIEW: We are looking for a highly skilled Cloud Architect to provide cloud security architecture services across enterprise AWS and Azure environments. This role goes beyond traditional cloud architecture. You will design and implement robust defense-in-depth security frameworks, establish automated compliance guardrails, integrate advanced security platforms, and drive cloud security governance across complex environments. Working at the intersection of Cloud Engineering, Cybersecurity, Risk, and Security Operations, you will contribute to ensuring cloud platforms remain secure, compliant, resilient, and continuously monitored. ## KEY RESPONSIBILITIES: - Cloud Security Governance & Guardrails - Design, implement, and enforce security baselines and preventative guardrails across AWS and Azure environments. - Develop governance frameworks leveraging: - AWS Organizations - Service Control Policies (SCPs) - AWS Control Tower - Azure Policy - Azure Landing Zones - Ensure alignment with internal security standards, regulatory requirements, and industry best practices. SIEM, Monitoring & Logging Architecture - Design and optimize multi-cloud logging and monitoring strategies. - Build scalable telemetry pipelines integrating: - AWS CloudTrail - Amazon GuardDuty - Azure Activity Logs - Microsoft Defender for Cloud - Enable centralized visibility through enterprise SIEM platforms such as: - Microsoft Sentinel - Splunk - Support real-time threat detection, correlation, investigation, and alerting capabilities. Endpoint & Workload Protection - Define architecture and deployment strategies for: - EDR/XDR solutions - Cloud Workload Protection Platforms (CWPP) - Secure virtual machines, containers, Kubernetes environments, and serverless workloads across cloud platforms. - Collaborate with Security Operations teams to enhance threat detection and response. Vulnerability & Security Posture Management - Implement and optimize Cloud Security Posture Management (CSPM) capabilities. - Establish enterprise vulnerability management processes across cloud assets. - Enable continuous security scanning for: - Cloud misconfigurations - Infrastructure vulnerabilities - Container images - Operating systems - Develop automated remediation workflows and security playbooks. Identity & Access Security - Design and enforce Zero-Trust security principles. - Strengthen Identity and Access Management (IAM) governance across cloud platforms. - Implement: - Just-In-Time (JIT) access - Privileged Access Management (PAM) - Role-Based Access Control (RBAC) - Federated identity solutions - Partner with security stakeholders to reduce privileged access risks. Security Technology Integration - Evaluate, deploy, and govern best-in-class cloud security technologies. - Integrate third-party security platforms including: - CyberArk - Wiz - Palo Alto Prisma Cloud - CrowdStrike - Other strategic security tooling - Drive consistent security controls and operational excellence across the cloud ecosystem. ## REQUIRED QUALIFICATIONS: - Extensive experience designing and securing enterprise-scale AWS and Azure environments.Deep knowledge of cloud-native security services, controls, and governance frameworks.Hands-on expertise with: - SIEM platforms - EDR/XDR technologies - Vulnerability management solutions - CSPM tools Strong experience implementing: - Azure Policy - AWS Control Tower - Service Control Policies (SCPs) - Cloud governance frameworks Advanced Infrastructure as Code (IaC) skills, particularly with Terraform.Experience embedding security controls into CI/CD and cloud deployment pipelines.Strong understanding of: - Modern cyber threats - MITRE ATT&CK framework - Cloud attack vectors - Security monitoring and incident response processes Proven ability to collaborate effectively with: - Cloud Engineering teams - Security Operations Centers (SOC) - Risk, Compliance, and Audit functions Excellent stakeholder management and communication skills. We offer a flexible collaboration model based on a B2B contract, with the opportunity to work on diverse projects. Recruitment Process: - HR Interview with the recruiter - Technical Interview - Client Interview - Feedback and offer ## #LI-HYBRID ## About Capco ## Company Overview - **One-liner**: Capco is a global management and technology consultancy specializing in the financial services and energy industries, known for its deep industry expertise and entrepreneurial culture. - **Entity Type**: Private (Wholly owned subsidiary of Wipro Limited since 2021) - **Headquarters**: London, England, United Kingdom - **Founded**: 1998 - **Founders**: Rob Heyvaert ## Core Business - **Primary industries**: Financial services (banking, payments, capital markets, wealth & asset management, insurance) and energy - **Target customers**: Large enterprises in highly regulated sectors (B2B/Enterprise) - **Mission/Purpose statement**: “Do something different by combining deep industry expertise, strong consulting fundamentals, real innovation, and a relentless focus on client impact.” [capco.com](https://www.capco.com/about-us) ## Products & Services Capco delivers consulting services rather than standalone products. Major service areas include: - **Banking & Payments**: Digital banking transformation, core modernization, payments advisory. - **Capital Markets**: Technology and data transformation, operational efficiency, regulatory compliance. - **Wealth & Asset Management**: Customer relationship enhancement, operational scalability, control environment strengthening. - **Insurance**: M&A support, technology innovation, profitability improvement. - **Energy**: Commodity trading and risk management, energy transition, utilities transformation. All services are delivered as **management and technology consulting** engagements. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed (acquired by Wipro in March 2021 for $1.45 billion) [linkedin.com](https://www.linkedin.com/company/capco) - **Key Metric (Private)**: Total headcount of ~5,930 (9.2% YoY growth); 670 active job postings [linkedin.com](https://www.linkedin.com/company/capco) - **Notable Investors/Partners**: **Wipro Limited** (parent company); earlier investor **Thomas Weisel Partners** (led $80M PE round in 2000) - **Growth Signals**: +9.2% headcount growth year-over-year; +30.5% LinkedIn follower growth (530,600 followers); recruitment volume up 10.4% quarterly [linkedin.com](https://www.linkedin.com/company/capco) ## Competitive Advantages - **Deep domain expertise** across financial services and energy – nearly three decades of focused experience. - **Expert-led, AI‑infused** delivery model that embeds technology and AI into every engagement. - **Strong brand and alumni network** (graduates of Capco work at UBS, Accenture, HSBC, etc.) – signals talent development and industry connections. - **Low bureaucracy, entrepreneurial culture** – flat hierarchies encourage ownership and client impact. ## Strategic Focus - Embedding AI and data as core enablers across all consulting work (“AI is not an add‑on – it is a core part of how we shape, build, and deliver value” [capco.com](https://www.capco.com/about-us)). - Continuing to expand in energy consulting alongside core financial services. - Driving measurable outcomes and lasting value for clients while maintaining a people‑first culture. ## Why Work Here - **Culture**: “Be Yourself at Work” (#BYAW) is a foundational value promoting inclusion, authenticity, and belonging. Minimal hierarchy and entrepreneurial freedom are emphasized. [capco.com](https://www.capco.com/about-us/our-culture-and-values) - **Learning & Development**: Structured programs from entry‑level Associate Talent Program (ATP) to experienced hire tracks; mentorship and hands‑on client exposure. - **Wellbeing**: Wellbeing@Capco program integrated into culture; benefits designed to support work‑life balance. [capco.com](https://www.capco.com/about-us/our-culture-and-values) - **Remote/Hybrid**: Not explicitly stated, but global offices in 43 countries suggest hybrid presence; role‑dependent. - **Notable perks**: Global mobility opportunities, comprehensive benefits, flat structure allowing early responsibility. ## Sources 1. [capco.com](https://www.capco.com/) – Company overview 2. [capco.com - About Us](https://www.capco.com/about-us) – History, leadership, vision 3. [capco.com - Careers](https://www.capco.com/careers) – Culture, learning, benefits 4. [capco.com - Culture & Values](https://www.capco.com/about-us/our-culture-and-values) – ESG, #BYAW, wellbeing 5. [linkedin.com/company/capco](https://www.linkedin.com/company/capco) – Headcount, funding, acquisitions, recruitment data ## Other roles at Capco - [Testing - Testing L2 (2.1-5 years)-29629-1](https://feeny.ai/job/testing-testing-l2-2-1-5-years-29629-1-capco-mumbai-z36pvsyz6km7) — Mumbai, India - [Testing - Testing L4 (7.1-9 years)-29021-1](https://feeny.ai/job/testing-testing-l4-7-1-9-years-29021-1-capco-chennai-kwzk0z4am4zz) — Chennai, India - [Functional Testing with Banking Domain - Functional Testing with Banking Domain L2 (2.1-5 years)-29297-1](https://feeny.ai/job/functional-testing-with-banking-domain-functional-testing-with-banking-domain-cxjaypw62wk1) — Mumbai, India - [Functional Testing with Banking Domain - Functional Testing with Banking Domain L3 (5.1-7 years)- 29774-1](https://feeny.ai/job/functional-testing-with-banking-domain-functional-testing-with-banking-domain-78w58qhe8jkw) — Chennai, India - [Functional Testing with Banking Domain - Functional Testing with Banking Domain L3 (5.1-7 years)](https://feeny.ai/job/functional-testing-with-banking-domain-functional-testing-with-banking-domain-7znamz7f8n0v) — Chennai, India - [Data Analyst - Data Analyst  L3 (5.1-7 years)](https://feeny.ai/job/data-analyst-data-analyst-l3-5-1-7-years-capco-mumbai-bhxrfb8m2mbm) — Mumbai, India - [Business Data Consultant - Qatar](https://feeny.ai/job/business-data-consultant-qatar-capco-middle-east-doha-qatar-n20jhw4vzkbx) — Middle East / Doha, Qatar - [Project Manager – Data Management & Transformation](https://feeny.ai/job/project-manager-data-management-transformation-capco-kuala-lumpur-tj1pvf11hxm5) — Kuala Lumpur, Malaysia - [Business Analyst - Retail Energy](https://feeny.ai/job/business-analyst-retail-energy-capco-united-states-dallas-tx-3jafm2x4mns0) — United States / Dallas, TX - [Capital Markets Regulatory Change - Consultant/Senior Consultant](https://feeny.ai/job/capital-markets-regulatory-change-consultant-senior-consultant-capco-united-emm47fbjc7gg) — United States / Dallas, TX