Principal Cloud Architect

FulcrumLATAM; Colombia; On-site; COP 180,000,000 - 280,000,000; Full time

Job summary

FulcrumLATAM seeks a Principal Cloud Architect & Security to own the architecture, security, and reliability of a growing multi-tenant SaaS platform in the financial services sector.

This hands-on role makes you the technical authority for architectural direction, security standards, and scalable, secure solutions. You will work with the CEO, Lead Developer, and Data Security Officer, and engage with clients and auditors.

Qualifications

• 8+ years of experience in cloud, infrastructure, security engineering, software architecture, or a related field.
• 5+ years of hands-on AWS production experience.
• Deep expertise in AWS architecture, networking, and cloud security.
• Strong understanding of VPC design, IAM, security groups, KMS, monitoring, and cloud security controls.
• Experience with PHP/Symfony and/or TypeScript environments.
• Experience with SOC 2 Type II or similar security/compliance frameworks.
• Infrastructure-as-code experience with Terraform, CloudFormation, CDK, or similar tools.
• Experience with Cloudflare, WAF, CDN, or comparable edge-security technologies.
• Experience working in fintech, banking, financial services, or another regulated industry is highly valuable.
• Ability to communicate complex technical and security concepts clearly with both technical and non-technical stakeholders.
• Professional working proficiency in English.

Responsibilities

• Design and evolve AWS architecture, networking, security, reliability, and scalability.
• Establish architectural standards and review significant technical designs before development begins.
• Own AWS security controls including VPC, IAM, security groups, KMS, CloudTrail, GuardDuty, CloudWatch.
• Manage cloud and edge security, including Cloudflare/WAF, TLS, DDoS protection, and origin protection.
• Design and maintain secure multi-tenant SaaS architecture, including tenant isolation, data architecture, APIs, and integrations.
• Guide infrastructure-as-code and architectural best practices using tools such as Terraform, CloudFormation, or CDK.
• Own the technical side of SOC 2 Type II controls, audit evidence, remediation, and security documentation.
• Work with engineering on secure application and infrastructure design.
• Participate in security reviews, vendor due diligence, penetration testing, and client-facing technical discussions.
• Establish a prioritized roadmap for architecture, infrastructure, and security improvements.

Skills

AWS architecture

Cloud security

IaC (Infra as Code)

Terraform

CloudFormation

CDK

SOC 2 Type II

VPC design

English

Fintech security

TypeScript

PHP/Symfony

Tools

Terraform

CloudFormation

CDK

Cloudflare

WAF

Job description

We are looking for a Principal Cloud Architect & Security to take technical ownership of the architecture, security, and reliability of a growing multi-tenant SaaS platform serving the financial services industry.

This is a hands-on role. You will be the technical authority responsible for setting architectural direction, establishing security standards, and guiding the engineering team toward scalable, secure solutions.

You will work closely with the CEO, Lead Developer, engineering team, and Data Security Officer, while also serving as a technical point of contact for clients, auditors, and security reviewers.

What You'll Own

• Design and evolve the platform's AWS architecture, networking, security, reliability, and scalability.
• Establish architectural standards and review significant technical designs before development begins.
• Own AWS security controls including VPC, IAM, security groups, KMS, CloudTrail, GuardDuty, CloudWatch, and related services.
• Manage cloud and edge security, including Cloudflare/WAF, TLS, DDoS protection, and origin protection.
• Design and maintain secure multi-tenant SaaS architecture, including tenant isolation, data architecture, APIs, and integrations.
• Guide infrastructure-as-code and architectural best practices using tools such as Terraform, CloudFormation, or CDK.
• Own the technical side of SOC 2 Type II controls, audit evidence, remediation, and security documentation.
• Work with engineering on secure application and infrastructure design.
• Participate in security reviews, vendor due diligence, penetration testing, and client-facing technical discussions.
• Establish a prioritized roadmap for architecture, infrastructure, and security improvements.

What We're Looking For

• 8+ years of experience in cloud, infrastructure, security engineering, software architecture, or a related field.
• 5+ years of hands-on AWS production experience.
• Deep expertise in AWS architecture, networking, and cloud security.
• Strong understanding of VPC design, IAM, security groups, KMS, monitoring, and cloud security controls.
• Experience with PHP/Symfony and/or TypeScript environments.
• Experience with SOC 2 Type II or similar security/compliance frameworks.
• Infrastructure-as-code experience with Terraform, CloudFormation, CDK, or similar tools.
• Experience with Cloudflare, WAF, CDN, or comparable edge-security technologies.
• Experience working in fintech, banking, financial services, or another regulated industry is highly valuable.
• Ability to communicate complex technical and security concepts clearly with both technical and non-technical stakeholders.
• Professional working proficiency in English.

Nice to Have

• Experience with Vanta, Drata, or similar compliance platforms.
• Familiarity with GLBA, FFIEC, NCUA, or similar regulatory requirements.
• AWS Solutions Architect Professional or AWS Security Specialty.
• CISSP or CCSP.

Why This Role?

• This is an opportunity to have real architectural ownership rather than simply maintaining an existing infrastructure.
• You will have a direct influence on how the platform is designed, secured, scaled, and evolved, working closely with company leadership and the engineering team.