Principal Cloud Security Architect

Cloud security architecture

Review cloud environments across AWS, Azure, and GCP to identify security weaknesses and architectural risks. Findings should explain what is misconfigured, overprivileged, or structurally unsound and how to improve it.

• Assess cloud designs for security gaps and weak architectural choices.
• Examine IAM configurations, network segmentation, and resource policies for excessive privileges or errors.
• Identify insecure patterns and longer-term design problems.
• Produce organized reports with prioritized mitigation recommendations.
• Validate consistency with established security frameworks and good practices.
• Support recurring reviews as environments and deployment approaches evolve.

Required expertise

Deep practical experience assessing cloud security architecture at scale is essential. You need a strong command of IAM models, networking principles, and service models across major cloud providers.

You should recognize subtle design weaknesses and communicate complex architectural findings clearly in writing. The work suits experienced professionals who can assess systems independently.

Helpful background

Multiple-cloud environments, zero trust architecture, and heavily regulated sectors are useful experience. Familiarity with CIS, NIST, CSA CCM, SOC 2, or FedRAMP is welcome.

Cloud-native security tools, CSPM systems, and infrastructure code review are also relevant.

Contract arrangement

The hourly engagement is fully remote, flexible, and suited to asynchronous work. Further assessments or projects may support continuing work or a contract extension.