Lead Cloud Security Architect for Scalable Threat Model Review

Keystone Digital

Contract · Remote · Flexible hours

About the role

Keystone Digital is driving a high‑velocity CI/CD and platform automation sprint to shrink release cycles for its flagship cloud services. As a Cloud Security Architect you will embed security controls directly into the automation pipeline, ensuring every release meets rigorous compliance standards while maintaining speed.

Key responsibilities

• Design and implement a zero‑trust network architecture for the new "Nimbus Deploy" automation module.
• Integrate AWS Security Hub, GuardDuty, and Config rules into the CI/CD workflow using Terraform and GitHub Actions.
• Develop automated threat‑modeling scripts that run on each merge request and generate actionable findings.
• Collaborate with DevOps engineers to container‑hardening guidelines for Docker images used in the release pipeline.
• Conduct security reviews of IaC templates and enforce policy as code with OPA.
• Provide quarterly security posture reports and roadmap recommendations for the sprint.

Must-have skills

• Deep expertise in AWS security services and IAM design.
• Proven experience securing CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI).
• Strong knowledge of container security and Docker hardening.
• Hands‑on with Terraform, CloudFormation, and policy‑as‑code tools.
• Architectural design of zero‑trust and micro‑segmentation solutions.

Nice to have

• Experience with Kubernetes security (PodSecurityPolicies, OPA Gatekeeper).
• Certifications such as AWS Certified Security – Specialty or CISSP.