Freelance Cloud Security Engineers in United StatesFreelance Cloud Security Engineers in United States
ProjectsPeople
Watheq Zboun's avatar
Watheq Zboun
maxUnited States
Microsoft 365 & Azure Solutions Architect
$5k+
Earned
1x
Hired
5.0
Rating
11
Followers
Microsoft 365 & Azure Solutions Architect
Cover image for Identity & MFA Security Assessment (Representative)
Identity & MFA Security Assessment (Representative)
0
1
Cover image for Defender & Sentinel SecOps Review (Representative)
Defender & Sentinel SecOps Review (Representative)
0
2
Cover image for Copilot Data Readiness Check (Representative)
Copilot Data Readiness Check (Representative)
0
3
Cover image for How I Deliver: The AZ ADAPTO Framework
How I Deliver: The AZ ADAPTO Framework
0
1
Cloud Security Engineer(6)
vipin garg's avatar
vipin garg
proChicago, USA
Expert Cloud Security & DevOps Engineer
5.0
Rating
35
Followers
Expert Cloud Security & DevOps Engineer
Cover image for Enhancing Cloud Security for Accessibility Company
Enhancing Cloud Security for Accessibility Company
2
10
Cover image for Streamlining DevOps Processes for SaaS Company
Streamlining DevOps Processes for SaaS Company
1
12
Cover image for AWS System Administration for a Healthcare firm based in SA
AWS System Administration for a Healthcare firm based in SA
1
9
Cover image for Fusion UX Doctor is an AI-powered webpage auditor built enti...
Fusion UX Doctor is an AI-powered webpage auditor built entirely in Fusion by Builder.io (http://Builder.io). Paste any URL and instantly get a complete UX, Accessibility, and Performance analysis, followed by AI-generated layout improvements built as real Fusion components. This project creatively uses Fusion’s visual canvas to turn audits into an interactive experience with animated cards, a clean Before/After comparison, and on-canvas component regeneration. The innovation lies in how AI doesn’t just evaluate a design, it rebuilds it directly in Fusion, proving what’s possible when design, code, and intelligence come together. Live Project: https://b5b76db448604e6099a747c1f7beab26-main.projects.builder.my/ (https://b5b76db448604e6099a747c1f7beab26-main.projects.builder.my/)#builderchallenge #builtwithfusion
21
354
Cloud Security Engineer(3)
Paul G's avatar
Paul G
Frisco, USA
Expert cloud & platform consultant building AI platforms
Expert cloud & platform consultant building AI platforms
Cover image for Architected an enterprise Kubernetes platform
Architected an enterprise Kubernetes platform on Azure AKS for a fintech company running 40+ microservices. Traffic enters through Application Gateway with WAF v2 policies and Azure Firewall before reaching the AKS cluster inside a hub-spoke VNet. ArgoCD manages all deployments through GitOps with automatic drift detection and self-healing. ACR stores container images built by Azure DevOps Pipelines with integrated vulnerability scanning. Workloads connect to Cosmos DB, PostgreSQL Flexible Server, and Redis Cache through private endpoints. Azure ML handles fraud detection model inference called directly from within cluster pods. Entra ID with Managed Identities provides passwordless auth across all services.
0
49
Cover image for Designed and deployed a multi-account
Designed and deployed a multi-account AWS landing zone using Control Tower and Organizations for a healthcare SaaS company handling PHI data. The architecture separates management, security, network, and workload accounts with dedicated IAM boundaries. Traffic routes through CloudFront and WAF into a Transit Gateway hub before reaching production VPCs running ECS Fargate workloads. Security Hub aggregates findings from GuardDuty, Inspector, and AWS Config across all accounts. CloudTrail feeds into EventBridge for real-time alerting through SNS. All encryption managed through a centralized KMS account. Infrastructure provisioned entirely with Terraform and Terragrunt modules. Achieved SOC 2 Type II and HIPAA compliance within 90 days.
0
65
Cover image for I built a production-ready serverless
I built a production-ready serverless LLM API on GCP designed for low cost, strong security, and fast inference. Requests flow through CDN, load balancing, WAF, and API management before hitting a Cloud Run FastAPI service that handles prompts, session history, caching, and model routing. The system switches between Gemini 2.5 Pro for deep reasoning and Gemini Flash for fast responses, with RAG support using Vector Search over 768-dim embeddings. Data is stored in Firestore, cached in Redis, and logged to BigQuery. Everything is secured with VPC Service Controls, Workload Identity, KMS, Secret Manager, and DLP. CI/CD is fully automated with Terraform and Cloud Build using canary rollouts and auto-rollback on SLO violations. At around 50K requests per day, the platform runs at about $1K/month and scales to zero when idle.
0
68
Cover image for Here's how I'd build a
Here's how I'd build a scalable ticketing backend with Supabase & Stripe. The backend is where everything lives or breaks. Supabase handles auth and Row Level Security out of the box, Postgres enforces ticket inventory and access at the database level, and Stripe Checkout processes payments with webhooks that keep everything in sync. Capacity limits, discount logic, and user access all of it stay consistent when real traffic hits. Built to scale without needing a full rewrite six months down the road.
0
42
Cloud Security Engineer(3)
Alexis Nieves's avatar
Alexis Nieves
Denver, USA
Senior DevOps/SRE | AWS, Kubernetes & Terraform Expert
New to Contra
Senior DevOps/SRE | AWS, Kubernetes & Terraform Expert
Cover image for Implementing Additional Checks for AWS Security
Implementing Additional Checks for AWS Security
0
0
Cover image for Comparing AWS ECS and AWS EKS for Container Orchestration
Comparing AWS ECS and AWS EKS for Container Orchestration
0
0
Cover image for Designed and developed a Command
Designed and developed a Command Line Interface (CLI) security tool that leverages the Google Gemini API (gemini-2.5-flash) to perform advanced, AI-driven vulnerability analysis on Python codebases. This tool acts as an automated security engineer, scanning source code to detect critical flaws before they reach production. The scanner parses Python files and evaluates them against a detailed security prompt to identify vulnerabilities such as SQL injection, hardcoded secrets (API keys and database passwords), weak cryptography (e.g., MD5 hashing), insecure deserialization, and improper input validation. It outputs a structured, color-coded terminal report assigning severity ratings (🔴 High, 🟠 Medium, 🟢 Low) to each finding. For every detected issue, the tool provides the vulnerability type, the exact line number, a concise explanation of the risk and potential impact, and actionable remediation advice with secure code fixes. The architecture is built on a lightweight Python foundation using a virtual environment for dependency isolation. It utilizes the google-generativeai SDK for model interaction and python-dotenv for secure environment variable management, ensuring API keys are never hardcoded. This project demonstrates the ability to integrate cutting-edge Large Language Models (LLMs) into traditional DevSecOps workflows, providing enterprise-grade security scanning capabilities directly within the developer's terminal.
0
13
Cover image for Architected and implemented a production-grade,
Architected and implemented a production-grade, fully automated DevOps platform on AWS, covering the entire software delivery lifecycle from code commit to live deployment. The platform integrates eight tightly coupled layers: a developer workflow built on Git, Docker Compose, and pull requests; a GitHub Actions CI/CD pipeline with dedicated workflows for continuous integration, deployment, Terraform provisioning, security scanning, and semantic releases; and a multi-tool security gate enforcing SAST, SCA, IaC scanning, container analysis, OWASP ZAP, and CodeQL checks before any artifact progresses. Infrastructure is provisioned as code using Terraform, deploying a multi-AZ VPC, an EKS cluster, ECR repositories, RDS MySQL, an ALB with WAF, and IAM OIDC integration on AWS. Applications are packaged with Helm Umbrella Charts and deployed to Kubernetes with Horizontal Pod Autoscaling (2–8 replicas) and RBAC-enforced NetworkPolicies. GitOps state management is handled by ArgoCD, providing continuous reconciliation, drift detection, auto-sync, and self-healing across all application sets. Observability is delivered through a dual-stack setup: a metrics pipeline (Prometheus → Grafana → Alertmanager → Slack) and a log aggregation pipeline (Filebeat → Logstash → Elasticsearch → Kibana). Releases are fully automated using Semantic Release with Conventional Commits, producing versioned GitHub Releases and Docker image tags without manual intervention.
0
13
Cloud Security Engineer(1)
Ali Said's avatar
Ali Said
Minneapolis, USA
Cloud Security specialist,AWS,AZURE,GCP,IAM,ENTRA ID,MFA
Cloud Security specialist,AWS,AZURE,GCP,IAM,ENTRA ID,MFA
Cover image for GCP IAM Role Setup with Least Privilege
GCP IAM Role Setup with Least Privilege
0
7
Cover image for IAM-management-AWS: Creating users, groups
IAM-management-AWS: Creating users, groups
0
5
Cover image for Azure-Active-Directory(ENTRA ID)
Azure-Active-Directory(ENTRA ID)
0
3
Placeholder project card media
View more →
Cloud Security Engineer(3)
jesse callistus's avatar
jesse callistus
United States
"Fortifying digital defenses strategically."
"Fortifying digital defenses strategically."
Cover image for Vulnerability Assessment Services DEMO
Vulnerability Assessment Services DEMO
0
11
Cover image for Pentest Engagements
Pentest Engagements
0
12
Cover image for Web Application Developer & Security
Web Application Developer & Security
0
5
Placeholder project card media
View more →
Cloud Security Engineer(2)