Principal Cloud Security Architect

Labelbox; Remote; CAD 150,000 - 200,000; Full time

Job summary

A cloud technology company located in Toronto is seeking a Principal Cloud Security Architect to evaluate and enhance security in cloud environments. The ideal candidate will have deep expertise in cloud security architecture, IAM, and network design. Responsibilities include assessing architectures for security gaps, reviewing configurations, and providing mitigation guidance. The role offers competitive compensation ranging from $40 to $80 per hour.

Qualifications

• Deep experience in cloud security architecture.
• Strong understanding of IAM, network design, and cloud service models.
• Ability to document complex architectures in clear, structured form.

Responsibilities

• Assess cloud architectures (AWS, Azure, GCP) for security gaps.
• Review IAM configurations, network segmentation, and resource policies.
• Identify misconfigurations, privilege risks, and insecure patterns.
• Summarize architectural flaws and provide structured mitigation guidance.
• Validate alignment with security frameworks and best practices.
• Support recurring assessments of cloud environments and deployment patterns.

Skills

Cloud security architecture

IAM

Network design

Cloud service models

Job description

Role Overview

The Principal Cloud Security Architect evaluates cloud architectures, identity models, permissions, and security controls across large-scale environments. This role focuses on identifying architectural risks, misconfigurations, and long‑term security design gaps.

What You’ll Do

• Assess cloud architectures (AWS, Azure, GCP) for security gaps
• Review IAM configurations, network segmentation, and resource policies
• Identify misconfigurations, privilege risks, and insecure patterns
• Summarize architectural flaws and provide structured mitigation guidance
• Validate alignment with security frameworks and best practices
• Support recurring assessments of cloud environments and deployment patterns

What You Bring

Must-Have:

• Deep experience in cloud security architecture
• Strong understanding of IAM, network design, and cloud service models
• Ability to document complex architectures in clear, structured form

Nice-to-Have:

• Experience with multi-cloud, zero‑trust, or high‑compliance environments

$40 - $80 an hour