Principal Cloud Security Architect

What if your deep expertise in cloud security could directly shape how enterprise-scale environments defend themselves against the threats that matter most? We're looking for a Principal Cloud Security Architect to evaluate complex cloud infrastructures, expose architectural weaknesses, and deliver the kind of structured, expert guidance that actually moves the needle on security posture.

What if your deep expertise in cloud security could directly shape how enterprise-scale environments defend themselves against the threats that matter most? We're looking for a Principal Cloud Security Architect to evaluate complex cloud infrastructures, expose architectural weaknesses, and deliver the kind of structured, expert guidance that actually moves the needle on security posture. This is a fully remote, flexible contract role for a senior practitioner who knows cloud security inside and out — someone who can look at an IAM policy, a network topology, or a multi-cloud deployment and immediately see what's wrong, why it matters, and what to do about it.

• Assess cloud architectures across AWS, Azure, and GCP for security gaps, misconfigurations, and insecure design patterns
• Review IAM configurations, privilege models, network segmentation strategies, and resource policies in depth
• Identify privilege escalation risks, lateral movement paths, and long-term architectural design flaws
• Produce clear, structured findings documents with prioritised mitigation guidance
• Validate alignment with established security frameworks and industry best practices
• Support recurring assessments of cloud environments and evolving deployment patterns
• Communicate complex technical risks in a way that's actionable for both technical and non-technical audiences

• Deep, hands-on experience in cloud security architecture across one or more major providers
• Strong command of IAM design, network security, and cloud-native service models
• Proven ability to identify architectural risk — not just misconfigurations, but systemic design weaknesses
• Skilled at documenting complex technical findings in clear, structured, professional formats
• Self-directed and reliable when working independently in an asynchronous environment

• Experience with multi-cloud environments, zero-trust architecture, or high-compliance frameworks (FedRAMP, HIPAA, PCI-DSS, etc.)
• Familiarity with cloud security posture management (CSPM) tools or infrastructure-as-code security review
• Relevant certifications such as AWS Security Specialty, CCSP, CISSP, or equivalent
• Background in red team, penetration testing, or threat modelling

• Work on meaningful, technically challenging security engagements that make a real difference
• Fully remote and async-friendly — work when and where you do your best thinking
• Freelance autonomy with structured, substantive work to sink your teeth into
• Engage across a variety of cloud environments and architectural patterns — no two assessments are the same
• Potential for ongoing contract work and expanded scope as new engagements launch