Principal Cloud Architect

FulcrumLATAM; Medellín; On-site; COP 180,000,000 - 300,000,000; Full time

Job summary

FulcrumLATAM is seeking a hands-on Principal Cloud Architect & Security to own the architecture, security, and reliability of a growing multi-tenant SaaS platform serving the financial services industry. You will be the technical authority guiding architectural direction and security standards for scalable, secure solutions.

You will collaborate with the CEO, Lead Developer, engineering team, and Data Security Officer while also engaging with clients, auditors, and security reviewers.

Qualifications

• 8+ years of experience in cloud, infrastructure, security engineering, software architecture, or a related field.
• 5+ years of hands-on AWS production experience.
• Deep expertise in AWS architecture, networking, and cloud security.
• Strong understanding of VPC design, IAM, security groups, KMS, monitoring, and cloud security controls.
• Experience with SOC 2 Type II or similar security/compliance frameworks.
• Infrastructure-as-code experience with Terraform, CloudFormation, CDK, or similar tools.

Responsibilities

• Design and evolve the platform's AWS architecture, networking, security, reliability, and scalability.
• Establish architectural standards and review significant technical designs before development begins.
• Own AWS security controls including VPC, IAM, security groups, KMS, CloudTrail, GuardDuty, CloudWatch, and related services.
• Manage cloud and edge security including Cloudflare/WAF, TLS, DDoS protection, and origin protection.
• Design and maintain secure multi-tenant SaaS architecture, including tenant isolation, data architecture, APIs, and integrations.
• Guide infrastructure-as-code and architectural best practices using Terraform, CloudFormation, or CDK.
• Own the technical side of SOC 2 Type II controls, audit evidence, remediation, and security documentation.
• Work with engineering on secure application and infrastructure design.
• Participate in security reviews, vendor due diligence, penetration testing, and client-facing technical discussions.
• Establish a prioritized roadmap for architecture, infrastructure, and security improvements.

Skills

Cloud architecture

AWS architecture

Security engineering

IaC practices

Terraform

CloudFormation

CDK

Security reviews

Client discussions

Tools

AWS

Terraform

CloudFormation

CDK

Cloudflare/WAF

KMS

GuardDuty

CloudWatch

Job description

We are looking for a Principal Cloud Architect & Security to take technical ownership of the architecture, security, and reliability of a growing multi-tenant SaaS platform serving the financial services industry.

This is a hands-on role. You will be the technical authority responsible for setting architectural direction, establishing security standards, and guiding the engineering team toward scalable, secure solutions.

You will work closely with the CEO, Lead Developer, engineering team, and Data Security Officer, while also serving as a technical point of contact for clients, auditors, and security reviewers.

What You'll Own

• Design and evolve the platform's AWS architecture, networking, security, reliability, and scalability.
• Establish architectural standards and review significant technical designs before development begins.
• Own AWS security controls including VPC, IAM, security groups, KMS, CloudTrail, GuardDuty, CloudWatch, and related services.
• Manage cloud and edge security, including Cloudflare/WAF, TLS, DDoS protection, and origin protection.
• Design and maintain secure multi-tenant SaaS architecture, including tenant isolation, data architecture, APIs, and integrations.
• Guide infrastructure-as-code and architectural best practices using tools such as Terraform, CloudFormation, or CDK.
• Own the technical side of SOC 2 Type II controls, audit evidence, remediation, and security documentation.
• Work with engineering on secure application and infrastructure design.
• Participate in security reviews, vendor due diligence, penetration testing, and client-facing technical discussions.
• Establish a prioritized roadmap for architecture, infrastructure, and security improvements

What we're looking for

• 8+ years of experience in cloud, infrastructure, security engineering, software architecture, or a related field.
• 5+ years of hands-on AWS production experience.
• Deep expertise in AWS architecture, networking, and cloud security.
• Strong understanding of VPC design, IAM, security groups, KMS, monitoring, and cloud security controls.
• Experience with PHP/Symfony and/or TypeScript environments.
• Experience with SOC 2 Type II or similar security/compliance frameworks.
• Infrastructure-as-code experience with Terraform, CloudFormation, CDK, or similar tools.
• Experience with Cloudflare, WAF, CDN, or comparable edge-security technologies.
• Experience working in fintech, banking, financial services, or another regulated industry is highly valuable.
• Ability to communicate complex technical and security concepts clearly with both technical and non-technical stakeholders.
• Professional working proficiency in English.

Nice to Have

• Experience with Vanta, Drata, or similar compliance platforms.
• Familiarity with GLBA, FFIEC, NCUA, or similar regulatory requirements.
• AWS Solutions Architect Professional or AWS Security Specialty.
• CISSP or CCSP.

Why This Role?

• This is an opportunity to have real architectural ownership rather than simply maintaining an existing infrastructure.
• You will have a direct influence on how the platform is designed, secured, scaled, and evolved, working closely with company leadership and the engineering team.

If you are a hands-on AWS architect who enjoys solving complex infrastructure and security challenges and wants significant technical ownership, we'd like to hear from you.