Cloud Security Architect

This role is for a Cloud Security Architect on a long-term contract, remote with occasional in-person meetings in Columbus, Ohio. Requires 3 years of experience with cloud platforms, security architecture, IAM, and compliance. Desired certifications include CCSP and AWS Certified Security - Specialty.

United States

Remote

• Leading the evaluation, selection, and implementation of Cloud Security detection and monitoring tools (i.e., Microsoft Defender for Cloud, Defender for Identity). These tools will monitor and scan Cloud workloads and servers to ensure they are securely configured (configuration management) and not vulnerable.
• Work with DAS teams for implementation.
• Workloads, containers, and orchestration (i.e., Docker /Kubernetes) security.
• Leading and incorporating Cloud Security Architecture into the Dev Sec Ops /Dev Ops program.
• Update any related policy documents.
• Establish Standard Operating Procedures around and for Cloud Security Architecture.
• Reviewing solutions for compliance to Cloud Security.
• Participating on project teams to advise on Cloud Security.
• Training Security Team members in related tools and processes (DAS and JFS).

• Cloud Platforms (IaaS, PaaS, SaaS) (3 Years Experience required)
• Deep understanding of AWS, Azure, and/or Google Cloud Platform (GCP)
• Familiarity with cloud-native services (e.g., IAM, VPC, KMS, Security Groups)
• Security Architecture & Design:
  Designing secure cloud architectures, Applying Zero Trust principles, Understanding of shared responsibility models
• Identity and Access Management (IAM):
  Role-based access control (RBAC), Single Sign-On (SSO), MFA, and federated identity, Privileged access management
• Network Security:
  Firewalls, VPNs, segmentation, and secure connectivity, Cloud-native network security tools (e.g., AWS Security Groups, Azure NSGs)
• Data Protection:
  Encryption at rest and in transit, Key management systems (KMS, HSM), Data classification and loss prevention (DLP)
• Compliance & Governance:
  Familiarity with standards like NIST, CIS, ISO 27001, SOC 2, HIPAA, GDPR, Policy-as-code (e.g., using tools like OPA, Sentinel)
• Dev Sec Ops  & Automation:
  Integrating security into CI/CD pipelines, Infrastructure as Code (IaC) security (e.g., Terraform, Cloud Formation), Security scanning tools (e.g., Snyk, Checkov)
• Threat Modeling & Risk Assessment:
  Identifying and mitigating cloud-specific threats, Using frameworks like STRIDE or MITRE ATT&CK for Cloud

• Certified Cloud Security Professional (CCSP)
• AWS Certified Security - Specialty
• Microsoft Certified:
  Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• CISSP (for broader security architecture knowledge)

Freelance data hiring powered by an engaged, trusted community — not a CV database.

85 Great Portland Street, London, England, W1W 7LT