Build it. Defend it.
One owner for your cloud and your audit.
Most teams stitch together a cloud contractor and a compliance consultant, then own the gap between them. I close that gap: I build your AWS/Kubernetes platform and pass the SOC 2, PCI DSS and ISO 27001 audit — one accountable owner, on a monthly retainer. CISA · AWS Pro · 16+ years.
What you get on the retainer
Build — cloud & platform
- Multi-account AWS landing zone, VPC topology, IAM Identity Center
- EKS/ECS, Terraform IaC, GitOps CI/CD with policy gates
- KMS, Secrets Manager, CloudTrail, Config, GuardDuty by default
Defend — compliance & audit
- SOC 2 Type 1/2, PCI DSS v4.0, ISO 27001, HIPAA, GDPR
- Control mapping, evidence automation, auditor liaison
- Zero-finding outcomes — the controls are real, not paper
One owner — no hand-off gap
- The controls an auditor asks for, engineered in from day one
- No “the DevOps contractor said security’s on you” finger-pointing
- Two vendors and two hand-off risks collapse into one
Retainer — senior ownership, not a hire
- Ongoing architecture oversight, drift & compliance monitoring
- Quarterly control reviews, continuous audit-readiness
- Dial up around audits/migrations, dial down after
Track record
Questions buyers ask
What is a fractional cloud & compliance architect?
A senior engineer engaged part-time on a retainer who both architects your AWS/Kubernetes platform and owns its compliance — SOC 2, PCI DSS, ISO 27001 — so one accountable person builds the infrastructure and defends it in the audit.
Why hire one person for both cloud and compliance?
Most teams hire a cloud contractor and a separate compliance consultant, then own the hand-off gap between them. One owner closes that gap: the controls an auditor asks for are engineered into the platform from day one, not bolted on afterward.
How does the retainer work?
A monthly retainer scaled to scope and stage, with the ability to dial up around an audit or migration and dial down after. You get senior cloud + compliance ownership without a full-time hire.
How is this different from a fractional CISO?
A fractional CISO owns the security program and governance; a fractional cloud & compliance architect is hands-on in the AWS account — building the IAM, KMS, logging and pipeline controls and producing the audit evidence, not just directing others to.
One owner for your cloud and your audit.
Free 30-minute call — tell me your stack, your frameworks, and the deadline you’re up against.