Lead Cloud Security Architect for Automated Security Audit

Keystone Digital

Contract · Remote · Flexible hours

About the role

Keystone Digital is launching a high‑velocity CI/CD and platform automation sprint to accelerate release cycles across its cloud services. As a Cloud Security Architect you will safeguard the automation pipeline, ensuring security is baked into every stage of the deployment workflow while supporting rapid delivery of new features.

Key responsibilities

• Design and implement security controls for the "Nebula Deploy" automation framework using AWS CDK and Terraform.
• Integrate automated vulnerability scanning (Snyk, Trivy) and secret detection (GitGuardian) into CI pipelines on GitHub Actions.
• Define and enforce least‑privilege IAM policies for cross‑account CI/CD roles and service‑mesh communications.
• Develop runtime hardening guidelines for Docker containers and Kubernetes pods used in the release pipeline.
• Conduct threat‑modeling workshops for each sprint milestone and produce actionable remediation tickets.
• Collaborate with DevSecOps engineers to create audit‑ready logs and real‑time security alerts in Splunk.

Must-have skills

• Deep expertise in AWS security services (IAM, KMS, GuardDuty).
• Extensive experience securing CI/CD pipelines and IaC tools.
• Proficiency with container security best practices and Docker hardening.
• Strong knowledge of threat modeling, risk assessment, and compliance frameworks.
• Hands‑on experience with security testing tools (Snyk, Trivy, Checkov).

Nice to have

• Familiarity with serverless security patterns.
• Experience with automated compliance reporting (CIS, SOC2).