Lead Cloud Security Architect for Threat Model Review

Northbay Systems

Contract · Remote · Flexible hours

About the role

Northbay Systems is launching a high‑velocity CI/CD and platform automation sprint to accelerate release cycles for its flagship cloud product, AuroraStream. As a Cloud Security Architect you will embed security controls directly into the automation pipelines, ensuring each release meets rigorous compliance standards while maintaining speed.

Key responsibilities

• Design and implement security-as-code policies using Terraform and AWS CloudFormation for the AuroraStream deployment pipeline.
• Integrate automated vulnerability scanning (Snyk, Trivy) and secret management (HashiCorp Vault) into GitLab CI jobs.
• Develop runtime hardening guidelines for Docker containers and Kubernetes clusters used in the sprint.
• Collaborate with DevOps engineers to create reusable security modules for IaC templates, reducing manual review time by 40%.
• Conduct threat modeling sessions for new micro‑services and produce mitigation roadmaps aligned with PCI‑DSS and SOC 2.
• Provide hands‑on guidance during sprint demos, reviewing pull requests for security compliance and documenting findings.

Must-have skills

• Deep expertise in AWS security services (IAM, Security Hub, GuardDuty).
• Proven experience with CI/CD tools (GitLab, Jenkins) and security integration.
• Strong knowledge of container security best practices and Kubernetes hardening.
• Hands‑on Terraform or CloudFormation scripting for secure infrastructure.
• Ability to perform threat modeling and risk assessments in fast‑paced environments.

Nice to have

• Certifications such as AWS Certified Security – Specialty or CISSP.
• Experience with serverless security patterns on AWS Lambda.