Cloud Security Architect

We are seeking an experienced Cloud Security Architect to design, implement, and govern secure cloud architectures across AWS and Microsoft Azure environments for a client of ours on a contract to hire basis.

This role is hybrid, requiring someone to work onsite 3-5 days a month.

This is a highly visible, strategic role that combines deep technical cloud security expertise with enterprise architecture and security leadership. You will partner closely with engineering, DevOps, infrastructure, application, risk, and compliance teams to embed security throughout the cloud lifecycle while enabling the organization to move quickly and securely.

The ideal candidate brings strong hands-on knowledge of AWS and Azure security technologies along with the ability to establish enterprise standards, influence technical direction, and communicate effectively with both engineering teams and senior leadership.

What You'll Do

\n
• Design and govern secure enterprise cloud architectures across AWS and Microsoft Azure.
\n
• Develop cloud security reference architectures, design patterns, guardrails, standards, and security baselines.
\n
• Define and advance enterprise cloud security strategies aligned with Zero Trust, DevSecOps, NIST, CIS, and other industry frameworks.
\n
• Architect secure Identity and Access Management (IAM) solutions using least privilege, RBAC, ABAC, federation, Microsoft Entra ID, and AWS IAM.
\n
• Design security controls for cloud networking, including VPCs/VNets, private endpoints, segmentation, and secure connectivity.
\n
• Establish approaches for encryption, key management, secrets management, and data classification using technologies such as AWS KMS and Azure Key Vault.
\n
• Secure cloud compute environments, including virtual machines, containers, Kubernetes (EKS/AKS), and serverless platforms.
\n
• Architect and integrate cloud security monitoring, logging, detection, and response capabilities using technologies such as Microsoft Sentinel, Microsoft Defender, AWS Security Hub, and GuardDuty.
\n

What We're Looking For

\n
• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field, or equivalent combination of education and professional experience.
\n
• 10+ years of IT and information security experience, including experience across systems, networking, access management, infrastructure, and enterprise security.
\n
• 3–5+ years of focused cloud security experience with AWS and/or Microsoft Azure.
\n
• Deep understanding of cloud security architecture, networking, IAM, encryption, key management, secrets management, and security monitoring.
\n
• Strong experience with AWS security technologies, including IAM, KMS, GuardDuty, Security Hub, WAF, and Shield.
\n
• Strong experience with Microsoft Azure security technologies, including Microsoft Defender for Cloud, Sentinel, Key Vault, and Entra ID.
\n
• Experience securing Kubernetes environments, particularly EKS and/or AKS.
\n
• Experience with Infrastructure-as-Code, including Terraform, Bicep, ARM templates, and/or CloudFormation.
\n
• Experience integrating security into DevOps/DevSecOps and CI/CD pipelines.
\n
• Knowledge of security frameworks and standards such as NIST, CIS Benchmarks, OWASP, Zero Trust, ISO 27001, and SOC 2.
\n
• Experience with Cloud Security Posture Management (CSPM)
\n