Principal Cloud Security Architect
About this role
About the Role What if your deep expertise in cloud security could directly shape how enterprise-scale environments defend themselves against the threats that matter most? We're looking for a Principal Cloud Security Architect to evaluate complex cloud infrastructures, expose architectural weaknesses, and deliver the kind of structured, expert guidance that actually moves the needle on security posture. This is a fully remote, flexible contract role for a senior practitioner who knows cloud security inside and out — someone who can look at an IAM policy, a network topology, or a multi-cloud deployment and immediately see what's wrong, why it matters, and what to do about it. What You'll Do - Assess cloud architectures across AWS, Azure, and GCP for security gaps, misconfigurations, and insecure design patterns - Review IAM configurations, privilege models, network segmentation strategies, and resource policies in depth - Identify privilege escalation risks, lateral movement paths, and long-term architectural design flaws - Produce clear, structured findings documents with prioritised mitigation guidance - Validate alignment with established security frameworks and industry best practices - Support recurring assessments of cloud environments and evolving deployment patterns - Communicate complex technical risks in a way that's actionable for both technical and non-technical audiences Who You Are Must-Have: - Deep, hands-on experience in cloud security architecture across one or more major providers - Strong command of IAM design, network security, and cloud-native service models - Proven ability to identify architectural risk — not just misconfigurations, but systemic design weaknesses - Skilled at documenting complex technical findings in clear, structured, professional formats - Self-directed and reliable when working independently in an asynchronous environment Nice to Have: - Experience with multi-cloud environments, zero-trust architecture, or high-compliance frameworks (FedRAMP, HIPAA, PCI-DSS, etc.) - Familiarity with cloud security posture management (CSPM) tools or infrastructure-as-code security review - Relevant certifications such as AWS Security Specialty, CCSP, CISSP, or equivalent - Background in red team, penetration testing, or threat modelling Why Join Us - Work on meaningful, technically challenging security engagements that make a real difference - Fully remote and async-friendly — work when and where you do your best thinking - Freelance autonomy with structured, substantive work to sink your teeth into - Engage across a variety of cloud environments and architectural patterns — no two assessments are the same - Potential for ongoing contract work and expanded scope as new engagements launch
Application listings
Choose a source listing and check its country requirements.