Cloud Security Architect ( Remote)
Remote
12+ Months
Security Risk Consultant (SRC) Cloud Security Architect
Alternates depending on seniority/framing: Sr. Security Architect Threat Modeling &
Controls, Cloud Security Consultant AWS/OpenShift, or Application Security Architect
(Financial Services).
SRC
Responsibilities
Conduct STRIDE-based threat model for the FICC target-state architecture
Map security controls to identified threatsDefine security testing framework (predeployment,
integration, resilience, continuous)
Validate multi-region DR design from a security perspective (split-brain prevention, audit
trails)
Design HashiCorp Vault integration patterns (OCP auth method, per-SYS ID ACL policies)
Assess IBM MQ RDQM security (mTLS, channel authentication)
Review A3P platform security controls (SCPs, account boundaries)
Define Ping Federate cloud connectivity security requirements
Produce security implementation guidance and developer checklist
Assess HiPAM-to-Vault refactoring scope per SYS ID
Skillset Required
AWS Security Specialty certification
STRIDE/DREAD threat modeling methodologyFinancial services security context (SIFMU
awareness)
IAM design patterns (OCP RBAC, namespace isolation)OpenShift security (SCCs,
NetworkPolicies, admission controllers)
HashiCorp Vault integration experienceIBM MQ security (mTLS, CONNAUTH)
Key Deliverables (Primary Owner)
Security threat model and controls mappingSecurity testing framework
Security implementation guidanceHiPAM-to-Vault migration scope assessment
