Lead Cloud Security Architect – Access Control Design Overhaul

Pinecrest Systems

Contract · Remote · Flexible hours

About the role

Pinecrest Systems is modernizing the performance and reliability of its customer‑facing services. As a Cloud Security Architect you will lead the security redesign of the NimbusGuard module, ensuring resilient, high‑throughput cloud operations while meeting strict compliance standards.

Key responsibilities

• Design and implement zero‑trust network architecture for NimbusGuard using AWS VPC, Transit Gateway, and Security Groups.
• Develop automated security hardening pipelines in Terraform and CI/CD (GitHub Actions) for all microservices.
• Conduct threat modeling and risk assessments for latency‑critical APIs, delivering mitigation plans within 2‑week sprints.
• Integrate runtime security tools (Falco, Aqua) into Kubernetes clusters to detect performance‑related anomalies.
• Collaborate with SRE teams to define SLAs and embed security controls that do not degrade response times.
• Produce detailed security architecture documentation and hand‑off guides for future maintenance.

Must-have skills

• Deep expertise in AWS security services (IAM, KMS, GuardDuty).
• Extensive experience designing cloud‑native security for high‑scale applications.
• Proficiency with IaC tools (Terraform, CloudFormation) and CI/CD automation.
• Strong knowledge of container security (Docker, Kubernetes, runtime scanning).
• Hands‑on threat modeling and incident response in multi‑region environments.

Nice to have

• Certifications such as AWS Certified Security – Specialty or CISSP.
• Experience with performance testing tools (Locust, k6) integrated into security pipelines.