Lead Cloud Security Architect for High-Volume Secure SDLC Setup

NexGen Media

Contract · Remote · Flexible hours

About the role

NexGen Media is expanding its secure multi‑tenant platform for enterprise clients. As a Cloud Security Architect you will lead the security design for the new "TenantShield" module, ensuring isolation and compliance across shared cloud resources while delivering the next phase of our B2B product.

Key responsibilities

• Architect and implement zero‑trust network segmentation for TenantShield using AWS VPC, Security Groups, and Service Mesh.
• Design and enforce IAM policies, SCPs, and role‑based access controls to isolate tenant data.
• Integrate automated security testing (Snyk, Checkov) into CI/CD pipelines for each tenant deployment.
• Conduct threat modeling workshops with product owners and define mitigation strategies for cross‑tenant attack vectors.
• Lead the migration of legacy workloads to containerized environments on Amazon EKS with pod‑level security policies.
• Produce security architecture diagrams and compliance artifacts for ISO 27001 and SOC 2 audits.

Must-have skills

• Deep expertise in AWS security services (IAM, KMS, GuardDuty, WAF).
• Proven experience designing multi‑tenant cloud architectures.
• Hands‑on with IaC tools such as Terraform and CloudFormation.
• Strong knowledge of network security, encryption, and zero‑trust principles.
• Ability to translate security requirements into actionable DevOps processes.

Nice to have

• Experience with compliance frameworks (PCI‑DSS, GDPR).
• Familiarity with serverless security patterns.