Cloud Security Architect
New
Remote in the U.S.ContractSenior
Salary120 - 179 USD per hour
Apply NowOpens the employer's application page
Job Details
- Experience
- 7 to 12 years
- Required Skills
- AWSAzureTerraform
Requirements
- 7 to 12 years in security architecture with recent cloud platform depth.
- Proven delivery on Azure and/or AWS (IAM, identity governance, encryption, key management, logging, monitoring).
- Landing zone design and enablement (subscriptions, accounts, network segmentation, baseline policies).
- IaC with Terraform or Bicep and Git based workflows.
- Familiarity with FFIEC expectations and NIST CSF 2.0.
- Knowledge of CIS Critical Security Controls and ISO 27001.
- Hands on with Microsoft Defender for Cloud, Sentinel, Entra, PIM, Azure Policy/Monitor or AWS Control Tower, GuardDuty, Security Hub, IAM Access Analyzer.
- Experience with evidence ready documentation for audit and exams.
Responsibilities
- Architect Azure and or AWS landing zones for financial services with identity, network, data, and logging baselines.
- Enable policy as code, secrets, and key rotation.
- Map FFIEC and NIST CSF controls to platform capabilities.
- Produce solution patterns and control narratives that exam teams can verify.
- Implement monitoring and detection into SIEM.
- Tune detections and dashboards for coverage and MTTR.
- Mentor platform and app teams on zero trust, private access, and least privilege designs.
- Run tabletop exercises with audit and risk for incident and recovery scenarios.
View Full Description & ApplyYou'll be redirected to the employer's site