Lead Cloud Security Architect Needed for Secrets Management Rollout

BrightMart Solutions

Contract · Remote · Flexible hours

About the role

BrightMart Solutions is launching a security hardening initiative for its suite of cloud‑hosted retail applications. As the Cloud Security Architect you will lead the design and implementation of robust security controls across AWS environments, focusing on the newly coined "Nimbus Shield" module that protects transaction flows.

Key responsibilities

• Assess the current AWS architecture and produce a hardening checklist aligned with CIS Benchmarks within the first two weeks.
• Design and enforce IAM policies, least‑privilege roles, and cross‑account access controls for the Nimbus Shield module.
• Implement automated security scans using Amazon Inspector and GuardDuty, integrating results into the CI/CD pipeline.
• Develop Terraform modules that embed encryption‑at‑rest and in‑transit for all S3 buckets and RDS instances.
• Conduct threat‑modeling workshops with developers and produce remediation roadmaps for identified risks.
• Provide weekly security status reports and present findings to senior leadership.

Must-have skills

• Deep expertise in AWS security services (IAM, KMS, GuardDuty, Inspector).
• Extensive experience designing zero‑trust network architectures.
• Proficiency with IaC tools such as Terraform or CloudFormation.
• Strong background in threat modeling and risk assessment frameworks.
• Hands‑on knowledge of container security best practices for Docker workloads.

Nice to have

• Certifications: AWS Certified Security – Specialty or CISSP.
• Experience with DevSecOps pipelines using Jenkins or GitHub Actions.