Principal Cloud Security Architect

About The Role

We're looking for a Principal Cloud Security Architect to evaluate complex cloud infrastructures, expose architectural weaknesses, and deliver the kind of structured, expert guidance that actually moves the needle on security posture. This is a fully remote, flexible contract role for a senior practitioner who knows cloud security inside and out — someone who can look at an IAM policy, a network topology, or a multi-cloud deployment and immediately see what's wrong, why it matters, and what to do about it.

What You'll Do

• Assess cloud architectures across AWS, Azure, and GCP for security gaps, misconfigurations, and insecure design patterns
• Review IAM configurations, privilege models, network segmentation strategies, and resource policies in depth
• Identify privilege escalation risks, lateral movement paths, and long-term architectural design flaws
• Produce clear, structured findings documents with prioritised mitigation guidance
• Validate alignment with established security frameworks and industry best practices
• Support recurring assessments of cloud environments and evolving deployment patterns
• Communicate complex technical risks in a way that's actionable for both technical and non-technical audiences

Must-Have

• Deep, hands-on experience in cloud security architecture across one or more major providers
• Strong command of IAM design, network security, and cloud-native service models
• Proven ability to identify architectural risk — not just misconfigurations, but systemic design weaknesses
• Skilled at documenting complex technical findings in clear, structured, professional formats
• Self-directed and reliable when working independently in an asynchronous environment

Nice To Have

• Experience with multi-cloud environments, zero-trust architecture, or high-compliance frameworks (FedRAMP, HIPAA, PCI-DSS, etc.)
• Familiarity with cloud security posture management (CSPM) tools or infrastructure-as-code security review
• Relevant certifications such as AWS Security Specialty, CCSP, CISSP, or equivalent
• Background in red team, penetration testing, or threat modelling

Why Join Us

• Work on meaningful, technically challenging security engagements that make a real difference
• Fully remote and async-friendly — work when and where you do your best thinking
• Freelance autonomy with structured, substantive work to sink your teeth into
• Engage across a variety of cloud environments and architectural patterns — no two assessments are the same
• Potential for ongoing contract work and expanded scope as new engagements launch