Cloud Security Architect Resume Example
Zero-trust layout: concentric trust zones in the header, a control-framework coverage table and cloud platform tags for cloud and cybersecurity architects.
Use this example Template: Cloud Security Architect
Arjun Mehta
Summary
Cloud security architect with 12 years in security engineering, the last 6 designing guardrails for regulated banks and insurers across Southeast Asia. I build multi-account landing zones, identity-first zero-trust access and policy-as-code that blocks misconfigurations before they ship. I translate MAS TRM and ISO 27001 controls into Terraform modules engineers actually use, and I lead threat modelling and incident response for cloud workloads.
Experience
- Designed the bank's multi-account AWS landing zone with Control Tower, SCPs and Terraform guardrails now covering 420 accounts
- Rolled out policy-as-code (OPA, Checkov) in CI pipelines, cutting critical misconfigurations reaching production by 83%
- Replaced VPN access with identity-aware proxies and short-lived credentials for 9,000 engineers (Okta, AWS IAM Identity Center)
- Mapped 140 MAS TRM controls to automated evidence; passed two regulator inspections with no findings
- Secured 14 Azure and AWS migrations for insurers and telcos: network segmentation, key management and SIEM onboarding
- Led threat-modelling workshops (STRIDE) for 60+ applications and built the cloud incident-response runbooks
Control coverage
| Framework | Controls | Automated |
|---|---|---|
| MAS TRM | 140 | 88% |
| ISO/IEC 27001:2022 | 93 | 74% |
| CIS AWS Foundations | 62 | 100% |
| PCI DSS v4.0 | 51 | 69% |
Summary example
Cloud security architect with [N] years in security engineering, the last [N] designing guardrails for regulated banks and insurers across Southeast Asia. I build multi-account landing zones, identity-first zero-trust access and policy-as-code that blocks misconfigurations before they ship. I translate MAS TRM and ISO 27001 controls into Terraform modules engineers actually use, and I lead threat modelling and incident response for cloud workloads.
Example bullet points for a Cloud Security Architect
- Designed the bank's multi-account AWS landing zone with Control Tower, SCPs and Terraform guardrails now covering [N] accounts
- Rolled out policy-as-code (OPA, Checkov) in CI pipelines, cutting critical misconfigurations reaching production by [X%]
- Replaced VPN access with identity-aware proxies and short-lived credentials for [N] engineers (Okta, AWS IAM Identity Center)
- Mapped [N] MAS TRM controls to automated evidence; passed two regulator inspections with no findings
- Secured [N] Azure and AWS migrations for insurers and telcos: network segmentation, key management and SIEM onboarding
- Led threat-modelling workshops (STRIDE) for [N]+ applications and built the cloud incident-response runbooks
Replace the [brackets] with your own numbers and facts. Never claim results you didn't achieve.
Skills to include
- Zero trust
- Landing zones
- IAM / PAM
- KMS / HSM
- Threat modelling
- AWS
- Azure
- Terraform
- OPA / Checkov
- Wiz
- Splunk
Tips for a Cloud Security Architect resume
- Put the hard requirements recruiters screen for in the top third: Zero trust, Landing zones, IAM / PAM.
- List current credentials with the issuing body, e.g. CISSP, CCSP.
- Give every recent role at least one measured result — for example aws accounts governed.
- Match the job title in your headline to the posting where it is honest to do so.
- Run the built-in resume checker and paste the job description into the keyword match before you download.
Related: How to write a resume · Action verbs · All templates