Location: Colombia — Remote

Type: Contractor

We are looking for a Principal Architect, Cloud & Security to take technical ownership of the architecture, security, and reliability of a growing multi-tenant SaaS platform serving the financial services industry.

This is a hands-on role. You will be the technical authority responsible for setting architectural direction, establishing security standards, and guiding the engineering team toward scalable, secure solutions.

You will work closely with the CEO, Lead Developer, engineering team, and Data Security Officer, while also serving as a technical point of contact for clients, auditors, and security reviewers.

What You'll Own

- Design and evolve the platform's AWS architecture , networking, security, reliability, and scalability.

- Establish architectural standards and review significant technical designs before development begins.
- Own AWS security controls including VPC, IAM, security groups, KMS, CloudTrail, GuardDuty, CloudWatch

, and related services.

- Manage cloud and edge security, including Cloudflare/WAF , TLS, DDoS protection, and origin protection.
- Design and maintain secure multi-tenant SaaS architecture

, including tenant isolation, data architecture, APIs, and integrations.

- Guide infrastructure-as-code and architectural best practices using tools such as Terraform, CloudFormation, or CDK

.

- Own the technical side of SOC 2 Type II controls, audit evidence, remediation, and security documentation.
- Work with engineering on secure application and infrastructure design.

- Participate in security reviews, vendor due diligence, penetration testing, and client-facing technical discussions.
- Establish a prioritized roadmap for architecture, infrastructure, and security improvements

What we're looking for





- 8+ years of experience in cloud, infrastructure, security engineering, software architecture, or a related field.

- 5+ years of hands-on AWS production experience.
- Deep expertise in AWS architecture, networking, and cloud security .
- Strong understanding of VPC design, IAM, security groups, KMS, monitoring, and cloud security controls

.

- Experience designing or architecting multi-tenant SaaS platforms .
- Experience with SOC 2 Type II or similar security/compliance frameworks.
- Infrastructure-as-code experience with

Terraform, CloudFormation, CDK, or similar tools .

- Experience with Cloudflare, WAF, CDN, or comparable edge-security technologies .
- Experience working in

fintech, banking, financial services, or another regulated industry is highly valuable.

- Ability to communicate complex technical and security concepts clearly with both technical and non-technical stakeholders.

- Professional working proficiency in English .

Nice to Have

- Experience with PHP/Symfony and/or TypeScript environments.
- Experience with Vanta, Drata, or similar compliance platforms.

- Familiarity with GLBA, FFIEC, NCUA, or similar regulatory requirements.
- AWS Solutions Architect Professional or AWS Security Specialty.
- CISSP or CCSP.

Why This Role?

- This is an opportunity to have real architectural ownership rather than simply maintaining an existing infrastructure.
- You will have a direct influence on how the platform is designed, secured, scaled, and evolved, working closely with company leadership and the engineering team.

If you are a hands-on AWS architect who enjoys solving complex infrastructure and security challenges and wants significant technical ownership, we'd like to hear from you. Apply here or reach out to [email protected]

📌 Principal Architect, Cloud & Security (Medellín)
🏢 FulcrumLATAM
📍 Medellín