Lead Cloud Security Architect for Vulnerability Remediation

Cascade Apps

Contract · Remote · Flexible hours

About the role

Cascade Apps is launching a high‑velocity CI/CD and platform automation sprint to accelerate release cycles. As a Cloud Security Architect you will embed security controls into the automation pipeline, ensuring each release meets rigorous compliance standards while maintaining speed.

Key responsibilities

• Design and implement security guardrails in Terraform for multi‑account AWS environments supporting the sprint.
• Integrate automated vulnerability scanning (Snyk, Trivy) into GitHub Actions and Jenkins pipelines.
• Develop IaC policies with OPA/Gatekeeper to enforce least‑privilege IAM roles during deployments.
• Collaborate with DevSecOps engineers to container‑hardening Docker images and enforce runtime security using Falco.
• Conduct threat modeling for the new release workflow and produce mitigation roadmaps.
• Provide hands‑on guidance and code reviews for security‑focused pull requests throughout the sprint.

Must-have skills

• Deep expertise in AWS security services (IAM, KMS, GuardDuty).
• Extensive experience with Terraform and cloud‑native IaC security patterns.
• Proficiency in CI/CD tools (GitHub Actions, Jenkins) and integrating security scans.
• Strong knowledge of container security best practices and Docker hardening.
• Ability to author and enforce OPA policies in automated pipelines.

Nice to have

• Experience with serverless security in AWS Lambda.
• Familiarity with compliance frameworks such as PCI‑DSS or ISO 27001.