Principal Cloud Security Architect

About The Role

What if your deep expertise in cloud security could directly influence how large-scale organizations protect their most critical infrastructure? We're looking for a Principal Cloud Security Architect to dissect cloud environments across AWS, Azure, and GCP — identifying architectural risks, IAM vulnerabilities, and security design gaps before they become breaches.

This is a fully remote, flexible contract role built for senior cloud security professionals who thrive on complex, high‑stakes technical analysis. If you see what others miss and can translate architectural risk into clear, actionable guidance, this role is for you.

• Type:
  Hourly Contract
• Location:
  
  Remote
• Commitment:
  Flexible, with support for recurring engagements

• Assess cloud architectures across AWS, Azure, and GCP for security vulnerabilities and design weaknesses
• Review IAM configurations, identity models, permission boundaries, and privilege escalation risks
• Evaluate network segmentation, resource policies, and service‑level security controls
• Identify misconfigurations, insecure patterns, and long‑term architectural debt
• Produce clear, structured reports summarizing findings and prioritized mitigation guidance
• Validate cloud environments against established security frameworks and industry best practices
• Support recurring assessments across evolving cloud deployments and infrastructure patterns

• Deep, hands‑on experience in cloud security architecture across one or more major providers
• Strong command of IAM design, network segmentation principles, and cloud service models
• Ability to translate complex technical findings into well‑structured, actionable documentation
• A sharp eye for misconfiguration, privilege risk, and systemic design flaws

• Experience operating in multi‑cloud, zero‑trust, or high‑compliance environments (FedRAMP, HIPAA, PCI‑DSS, SOC
  2)
• Familiarity with cloud‑native security tooling and infrastructure‑as‑code security review
• Relevant certifications such as AWS Security Specialty, CCSP, CISSP, or equivalent

• Work on high‑impact security engagements that directly shape how organizations protect critical cloud infrastructure
• Fully remote and flexible — work when and where it suits you
• Freelance autonomy with the structure of meaningful, well‑defined technical work
• Engage with complex, large‑scale environments that challenge and sharpen your expertise
• Potential for ongoing work and contract extension as new engagements launch