Principal Cloud Security Architect

About the Role

What if your deep expertise in cloud security could directly protect the architectures that power modern enterprises? We're looking for a Principal Cloud Security Architect to evaluate large-scale cloud environments, uncover architectural risks, and deliver structured, actionable guidance that makes real systems measurably safer.

This is a fully remote, flexible contract role built for seasoned cloud security professionals who think in systems, spot design flaws others miss, and communicate complex risks with clarity.

• Type: Hourly Contract
• Location: Remote
• Focus: Cloud security architecture assessment across AWS, Azure, and GCP

What You'll Do

• Evaluate cloud architectures across AWS, Azure, and GCP for security gaps and design weaknesses
• Review IAM configurations, network segmentation, and resource-level policies for privilege risks and misconfigurations
• Identify insecure patterns, architectural anti-patterns, and long-term security design flaws
• Produce clear, structured documentation of findings with prioritized mitigation guidance
• Validate alignment with industry security frameworks and established best practices
• Support recurring assessments of cloud environments and evolving deployment patterns

Who You Are

Must-Have:

• Deep, hands-on experience in cloud security architecture — you've assessed real environments at scale
• Strong command of IAM models, network design principles, and cloud service models across major providers
• Ability to translate complex architectural findings into clear, structured written assessments
• Sharp instincts for identifying what's misconfigured, overprivileged, or structurally unsound

Nice to Have:

• Experience with multi-cloud environments, zero-trust architecture, or high-compliance regulated sectors
• Familiarity with frameworks such as CIS, NIST, CSA CCM, or SOC 2 / FedRAMP requirements
• Background in cloud-native security tooling, CSPM platforms, or infrastructure-as-code review

Why Join Us

• Work on high-impact, technically challenging security assessments that matter
• Fully remote and async-friendly — structure your work around your schedule
• Freelance autonomy with meaningful, substantive engagements
• Contribute expertise that directly improves the security posture of real-world cloud environments
• Potential for ongoing work and contract extension across new assessments and projects