Technical Cloud Security Architect

Excited to grow your career?

BBVA is a global company with more than 160 years of history that operates in more than 25 countries where we serve more than 80 million customers. We are more than 121,000 professionals working in multidisciplinary teams with profiles as diverse as financiers, legal experts, data scientists, developers, engineers and designers.

At BBVA we are leading the transformation of banking worldwide, united in pursuing our goal of supporting your drive to go further. Firmly focused on the future, our on-going digital transformation is already producing disruptive innovations that power our vision of banking. Building on 160 years of history we know the importance of constant development, which is why we place so much confidence in the collaborative working environment that enables our people to grow and excel.

For over 50 years, BBVA in Switzerland has been helping clients manage their wealth with a global outlook, Swiss precision, and a philosophy that blends tradition with innovation. From Zurich to the world, we provide tailored solutions for those who value both strategy and trust.

Yet, our greatest strength lies in our people: an international, diverse, and highly skilled team that combines financial expertise with a digital mindset and innovative spirit. Continuous learning, cross-cultural collaboration, and career growth that makes a real impact in our clients’ lives drive everything we do, shaping both the way we work and the opportunities we create for our team.

Joining BBVA in Switzerland means being part of a global bank, working on pioneering projects in private and digital banking, and growing within a culture that listens, evolves, and strives to make a difference.

BBVA is a Spanish bank with its Swiss offices located in Zürich.

About the job:

The role is focused on the design, implementation and validation of security architectures in Microsoft Azure. The position works hands-on with cloud, infrastructure and engineering teams to ensure that Azure environments are secure, observable and resilient by design.

Functions (duties and responsibilities):

• Technical ownership of security architecture for Azure-based solutions, covering identity, networking, workloads, data and monitoring.
• Analysis of technical designs and implementations in Azure to identify security weaknesses, misconfigurations and risks, proposing concrete remediation actions.
• Design and implementation of Azure security controls, including network segmentation, identity protections, workload hardening and secure connectivity.
• Definition of secure Azure landing zones and reference architectures, aligned with corporate standards and Azure best practices.
• Hands-on support to projects throughout the full lifecycle: architecture design, build, deployment, configuration and operations.
• Integration of security monitoring, logging and alerting into Azure architectures, ensuring visibility and detection capabilities.
• Collaboration with Cloud Engineers, DevOps and Network teams to ensure secure-by-default Azure deployments.
• Validation of security configurations and architectures, producing technical evidence of compliance.

Your profile:

• Bachelor's degree in Computer Science, Systems Engineering, or a related field.
• Strong hands-on experience in Azure Security Architecture.
• Deep technical knowledge of Microsoft Azure services, especially from a security perspective.
• Solid understanding of Azure networking, including Virtual Networks (VNets), subnets and routing, Network Security Groups (NSG), Azure Firewall and firewall concepts, private endpoints, service endpoints and hybrid connectivity
• Strong experience with identity and access management in Azure, including authentication, authorization and privileged access.
• Experience designing and implementing cloud security monitoring, including logs, metrics, alerts and integration with SOC/SIEM platforms.
• Knowledge of workload security in Azure (compute, containers, PaaS services).
• Understanding of the shared responsibility model and cloud-native security principles.
• Familiarity with infrastructure as code (IaC) and security controls in automated deployments.
• Good understanding of secure DevOps and CI/CD security concepts.
• Ability to read, understand and challenge technical designs and architectures.
• Strong problem-solving mindset and autonomy in technical work.
• Excellent knowledge of English and Spanish. German is a plus.

The ideal candidate has the following experience:

• Proven experience designing and implementing security architectures in Microsoft Azure.
• Hands-on experience with Azure security services across identity, network, workload and monitoring layers.
• Experience securing complex cloud environments, including multi-subscription and hybrid scenarios.
• Strong technical background in networking and cloud infrastructure.
• Experience working closely with engineering teams to embed security into cloud architectures.
• Experience documenting and validating technical security decisions and configurations.

Skills:

Administración de identidad y acceso (IAM), Arquitecturas de la nube, Diseño de controles de seguridad, Idioma español, Idioma inglés, Microsoft Azure, Microsoft Azure Security, Resolución de problemas, Seguridad de la nube, Seguridad de red, Trabajo en equipo