Lead Cloud Security Architect for Secure SDLC Setup

BlueSky Ventures

Contract · Remote · Flexible hours

About the role

BlueSky Ventures is launching a high‑velocity CI/CD and platform automation sprint to accelerate release cycles. As a Cloud Security Architect you will safeguard the Nimbus Release Engine, our internal module that orchestrates automated deployments across multi‑cloud environments.

Key responsibilities

• Design and implement zero‑trust network controls for the Nimbus Release Engine using AWS Security Hub and IAM policies.
• Integrate automated security scans (Snyk, Trivy) into Jenkins pipelines to enforce compliance on every commit.
• Develop Terraform modules that embed encryption‑at‑rest and in‑transit for all CI/CD artefacts.
• Collaborate with DevSecOps teams to define security gates and gatekeeper policies in GitHub Actions.
• Conduct threat modeling workshops for each sprint milestone and produce actionable mitigation plans.
• Provide hands‑on guidance for container hardening in Docker and Kubernetes runtimes.

Must-have skills

• Deep expertise in AWS cloud security services (IAM, KMS, GuardDuty).
• Extensive experience designing secure CI/CD pipelines with Jenkins, GitHub Actions or GitLab CI.
• Proficiency in infrastructure‑as‑code tools like Terraform or CloudFormation.
• Strong knowledge of container security best practices and Docker hardening.
• Ability to perform threat modeling and risk assessment for cloud‑native workloads.

Nice to have

• Certifications such as AWS Certified Security – Specialty or CISSP.
• Experience with serverless security patterns on AWS Lambda.