Lead Cloud Security Architect Needed for Secrets Management Rollout Upgrade

Summit Digital

Contract · Remote · Flexible hours

About the role

Summit Digital is expanding its secure multi‑tenant platform for enterprise clients. As a Cloud Security Architect you will define and implement security controls for the upcoming tenant isolation module, ensuring compliance and resilience across the B2B product suite.

Key responsibilities

• Design zero‑trust network segmentation for the new multi‑tenant layer using AWS VPC, Security Groups, and Service Mesh.
• Develop IaC security policies with Terraform and AWS CloudFormation, integrating automated checks in the CI pipeline.
• Conduct threat modeling and risk assessments for tenant data flows, documenting mitigation strategies in Confluence.
• Implement runtime protection with AWS GuardDuty, Inspector, and custom Lambda auditors.
• Lead security reviews for API gateways and micro‑service communication, enforcing mTLS and fine‑grained IAM roles.
• Provide guidance to dev teams on secure coding practices and container hardening in Docker/Kubernetes environments.

Must-have skills

• Deep expertise in AWS security services and architecture.
• Proven experience designing zero‑trust and multi‑tenant cloud solutions.
• Strong knowledge of IaC security, Terraform, and automated compliance.
• Hands‑on with container security, Docker, and Kubernetes hardening.
• Excellent threat modeling and incident response capabilities.

Nice to have

• Certifications such as AWS Certified Security – Specialty or CISSP.
• Experience with DevSecOps tooling like Snyk or Aqua Security.