Lead Cloud Security Architect – Audit Readiness

Pinecrest Systems

Contract · Remote · Flexible hours

About the role

Pinecrest Systems is launching a greenfield SaaS platform built for remote‑first teams. As a Cloud Security Architect you will define and implement the security foundation for the new "Nimbus Guard" module, ensuring compliance and resilience from day one.

Key responsibilities

• Design a zero‑trust network architecture on AWS using VPC, Security Groups, and IAM policies for the Nimbus Guard service.
• Implement automated security scans with Terraform, Checkov, and AWS Config rules integrated into the CI/CD pipeline.
• Develop container hardening guidelines for Docker images and orchestrate runtime security with Falco.
• Conduct threat modeling workshops and produce risk registers aligned with ISO 27001 for each sprint milestone.
• Lead incident‑response playbooks and configure AWS GuardDuty, Security Hub, and CloudTrail alerts.

Must-have skills

• Deep expertise in AWS security services and architecture.
• Proven experience with IaC security tools (Terraform, Checkov, Sentinel).
• Strong knowledge of container security and runtime monitoring.
• Hands‑on incident response and threat modeling for cloud workloads.

Nice to have

• Familiarity with CSPM solutions such as Prisma Cloud.
• Certifications like AWS Certified Security – Specialty.