We use PostHog and Clarity to improve the site, and Meta Pixel to measure page views and ad effectiveness. Usage data may include page addresses and browser identifiers. You can opt out of collection at any time. Details in the Privacy Policy
Senior Cloud Security Solutions Architect at Discreet Company · Trevo
We are seeking a visionary, highly skilled Senior Cloud Solution Architect to join our Delivery department in Israel. You will drive the design, evolution, and scalability of our cloud-native platforms, bridging business objectives and technical implementation while championing cloud best practices across engineering teams.
Alongside this, you will serve as a customer-facing Security Architect for enterprise-scale Professional Services engagements: assessing customers' security posture, defining target-state architectures, and translating business, security, and compliance requirements into implementation-ready Statements of Work for the SecOps PS team. This is a hands-on role, with ownership spanning discovery, scoping, implementation, and production handover.
What you'll do
Cloud Architecture
Design and implement scalable, resilient, highly available, and secure cloud-native architectures on AWS, with additional coverage of GCP and Azure.
Collaborate with Delivery engineering teams to modernize legacy applications into distributed, microservices-based architectures.
Define, standardize, and govern the organization's cloud architecture principles and best practices.
Lead technical and architectural reviews, ensuring alignment with security, reliability, and cost-efficiency standards.
Drive Infrastructure as Code implementation using Terraform, CloudFormation, or similar tools.
Evaluate and integrate emerging cloud technologies, SaaS platforms, and third-party tools.
Optimize cloud environments for cost (FinOps), performance, and scalability.
Author and maintain system architecture documentation, blueprints, and decision records (ADRs).
Security Architecture & Professional Services
Lead customer discovery and evidence-based current-state security assessments across cloud and hybrid environments (assets, identities, network architecture, data flows, controls, tooling, SecOps processes), identifying risks, gaps, and maturity issues.
Design scalable target-state security architectures and prioritized remediation roadmaps across complex multi-account, multi-region, and hybrid environments.
Translate applicable ISO/IEC 27001, SOC 2, GDPR, HIPAA, and customer-specific requirements into concrete controls, implementation tasks, and evidence requirements, working with compliance, privacy, and legal stakeholders.
Support presale efforts for security engagements, including scoping conversations and early-stage solution framing, where needed.
Author and own delivery-ready SOWs for SecOps Professional Services: objectives, scope, work packages, deliverables, assumptions, dependencies, responsibilities, effort estimates, milestones, and acceptance criteria. Validate feasibility with SecOps delivery leads before customer commitments.
Architect and implement operational security capabilities such as centralized logging, SIEM integration, detection use cases, and alert triage and response automation, designed around each customer's tooling, data volumes, and cost constraints.
Provide technical leadership through implementation: plan phased rollout and rollback, resolve architectural issues, validate controls against acceptance criteria, and complete as-built documentation, runbooks, and knowledge transfer.
Mentor SecOps engineers and delivery teams, fostering architectural rigor and consistency across engagements.
Requirements
Core
6+ years of experience in systems, infrastructure, or security engineering within R&D or Delivery environments.
3+ years as a Cloud Architect, Principal Cloud Engineer, or similar technical leadership role.
Strong IaC proficiency, specifically Terraform.
Experience with containerized applications, Docker, and Kubernetes (EKS, AKS, or GKE), including hardening and security configuration.
Familiarity with microservices, RESTful API design, event-driven patterns, and message brokers (Kafka, RabbitMQ), sufficient to assess and secure these patterns in customer environments.
Working knowledge of CI/CD tooling (GitHub Actions, GitLab CI, Jenkins, or similar), including embedding security controls into pipelines.
Familiarity with SQL/NoSQL databases, caching, and cloud storage from a security and data-protection perspective.
Excellent communication and presentation skills in both Hebrew and English, with the ability to guide customers through workshops and translate technical findings for non-technical stakeholders.
Security
3+ years of proven experience both architecting and personally implementing security projects in customer-facing PS or consulting engagements, with concrete examples of environment scale, contributions, and measurable outcomes.
Strong applied understanding of ISO/IEC 27001, SOC 2, GDPR, and HIPAA, including risk assessment, control mapping, remediation, and evidence collection, with the ability to translate requirements into implementable controls rather than checklist-only assessments.
Deep hands-on security engineering: identity and privileged access, network segmentation, encryption and key management, secrets management, cloud and Kubernetes hardening, vulnerability management, logging and detection, plus experience implementing repeatable controls via Terraform and CI/CD.
Ability to independently lead customer workshops, assess unfamiliar environments, scope security work, estimate effort, and author SOWs that SecOps engineers can execute. Experience limited to policy writing, audit coordination, or presales without implementation ownership is not sufficient.
Nice to have
Security certifications such as CISSP, CCSP, or AWS Certified Security Specialty, complementing hands-on delivery experience.
Professional-level cloud certifications, such as AWS Certified Solutions Architect Professional or Google Cloud Professional Cloud Architect.
Working familiarity with Azure.
Experience with serverless architectures (AWS Lambda, Azure Functions) and API Gateways.
Prior cloud cost monitoring and reduction initiatives (FinOps).
Background in high-growth B2B SaaS or global enterprise environments.
Familiarity with observability tools (Prometheus, Grafana, Datadog, New Relic).
Deep, hands-on, production-proven expertise with AWS as the primary platform, plus hands-on experience with GCP. Azure familiarity is a