About The Role What if your deep expertise in cloud security could directly shape how enterprise-scale environments defend themselves against the threats that matter most? We're looking for a Principal Cloud Security Architect to evaluate complex cloud infrastructures, expose architectural weaknesses, and deliver the kind of structured, expert guidance that actually moves the needle on security posture. This is a fully remote, flexible contract role for a senior practitioner who knows cloud security inside and out — someone who can look at an IAM policy, a network topology, or a multi-cloud deployment and immediately see what's wrong, why it matters, and what to do about it.

What You'll Do

Assess cloud architectures across AWS, Azure, and GCP for security gaps, misconfigurations, and insecure design patterns Review IAM configurations, privilege models, network segmentation strategies, and resource policies in depth Identify privilege escalation risks, lateral movement paths, and long-term architectural design flaws Produce clear, structured findings documents with prioritised mitigation guidance Validate alignment with established security frameworks and industry best practices Support recurring assessments of cloud environments and evolving deployment patterns Communicate complex technical risks in a way that's actionable for both technical and non-technical audiences Must-Have Who You Are Deep, hands-on experience in cloud security architecture across one or more major providers Strong command of IAM design, network security, and cloud-native service models Proven ability to identify architectural risk — not just misconfigurations, but systemic design weaknesses Skilled at documenting complex technical findings in clear, structured, professional formats Self-directed and reliable when working independently in an asynchronous environment Nice To Have Experience with multi-cloud environments, zero-trust architecture, or high-compliance frameworks (FedRAMP, HIPAA, PCI-DSS, etc.) Familiarity with cloud security posture management (CSPM) tools or infrastructure-as-code security review Relevant certifications such as AWS Security Specialty, CCSP, CISSP, or equivalent Background in red team, penetration testing, or threat modelling

Why Join Us

Work on meaningful, technically challenging security engagements that make a real difference Fully remote and async-friendly — work when and where you do your best thinking Freelance autonomy with structured, substantive work to sink your teeth into Engage across a variety of cloud environments and architectural patterns — no two assessments are the same Potential for ongoing contract work and expanded scope as new engagements launch