Senior Cloud Security Engineer

Select how often (in days) to receive an alert:
Create Alert

Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people’s lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us at  .

We are seeking an experienced and hands‑on Senior Cloud Security Engineer to join our Product Security Architecture and Operations team. This role will help secure cloud applications and solutions hosted on Microsoft Azure by partnering closely with engineering teams to assess cloud architectures, monitor internal and external threats, and identify potential vulnerabilities across cloud and internal environments.

You will apply deep expertise in cloud security, Cloud‑Native Application Protection Platforms (CNAPP), identity and access management, Kubernetes, Infrastructure as Code, and modern Dev Sec Ops  practices to proactively reduce risk across infrastructure, workloads, identities, APIs, and application delivery pipelines.

This is a high‑impact role for a security engineer who can translate risk into practical engineering guidance, embed automated controls into delivery workflows, and strengthen secure‑by‑design and Zero Trust practices across cloud‑native platforms.

• Lead security architecture reviews for Microsoft Azure applications, platforms, and services, identifying risks and recommending pragmatic, risk‑based remediation strategies.
• Drive CNAPP capabilities across Cloud Security Posture Management (CSPM), Cloud Workload Protection Platforms (CWPP), Cloud Infrastructure Entitlement Management (CIEM), and Kubernetes and container security.
• Assess identity and access architectures using Microsoft Entra  other identity providers, including Okta, and guide teams on secure authentication, federation, single sign‑on, and least‑privilege access for users and workloads.
• Review and strengthen the use of Microsoft Entra service principals, Azure managed identities, workload identities, privileged access, and identity entitlement controls.
• Evaluate security controls for AKS and Kubernetes environments, including image hardening, admission and runtime controls, secrets handling, network segmentation, and workload protection.
• Review Infrastructure‑as‑Code implementations using Terraform, ARM, and Bicep, and identify insecure resource configurations before deployment.
• Assess service‑to‑service and API communication patterns, including authentication, authorization, encryption, secrets management, and trust boundaries.
• Partner with engineering squads to integrate automated security checks and risk‑based deployment gates into CI/CD pipelines.
• Drive adoption of SAST, DAST, Software Composition Analysis, container image scanning, and IaC scanning across the software delivery lifecycle.
• Implement and improve policy‑as‑code guardrails that evaluate infrastructure configurations and deployment requests against defined security…