Cloud Security Engineer arrow_forward

Native American Indian Preference in hiring policy is adhered to at all times;
Wind Creek Hospitality does not discriminate on the basis of age, disability, gender or religious orientation. Drug Free Workplace Policy.

Complaints about the recruitment or selection process for employment should be directed in writing to office of the President and CEO of Wind Creek Hospitality Authority.

Wind Creek Hospitality is seeking a high-energy, technically accomplished Cloud Security Engineer to advance the security of growing cloud, SaaS, data, and application environments. This role partners with infrastructure, identity, data, analytics, development, architecture, product, privacy, compliance, and security operations teams to design and implement security at enterprise scale.

The engineer serves as a hands-on technical authority for multi-cloud security, with primary depth in Microsoft Azure and working competency in AWS. The position owns security engineering outcomes through deployment, monitoring, incident support, optimization, and operations. Success requires curiosity, sound judgment, disciplined documentation, effective communication, and the ability to translate risk into practical controls.

Engineer, automate, and continuously improve security across Azure, AWS, SaaS, data, identity, applications, and cloud-native platforms using a risk-based, zero-trust, and Dev Sec Ops  approach.

Our genuine engagement and positive energy provide guests an escape from their routine into our exciting fantasy world of fun, chance, and possibility, where everyone feels a sense of belonging and importance.

Our enthusiastic commitment to our purpose inspires and empowers us to do everything right, have fun, and be the best.

We will be recognized fairly, elevating our levels of personal accountability, and focus on our customer.

The resulting creation of wealth will grow opportunities for all.

• Engineer and operate security controls for Azure, AWS, SaaS, hybrid, and cloud-native environments, including identity, networking, compute, storage, databases, containers, serverless services, applications, APIs, and data platforms.
• Implement and continuously improve cloud security posture management, workload protection, attack-path analysis, regulatory compliance monitoring, and security recommendations using Microsoft Defender for Cloud, AWS-native security services, and approved CNAPP/CSPM tooling.
• Design and enforce identity-first and zero-trust controls using Microsoft Entra  cloud IAM, including least privilege, role-based access control, privileged access, workload identities, managed identities, service principals, access reviews, conditional access, and secrets reduction.
• Build security guardrails and policy-as-code for subscriptions, accounts, management groups, landing zones, and resource configurations. Automate preventive and detective controls through Azure Policy, AWS Organizations and Service Control Policies, and approved infrastructure-as-code pipelines.
• Embed security into CI/CD and platform engineering workflows. Implement source, dependency, secret, container, infrastructure-as-code, API, and dynamic application security testing with enforceable quality gates and risk-based exception handling.
• Secure Kubernetes, container registries, serverless workloads, virtual machines, platform services, and cloud databases using hardened configurations, image assurance, runtime controls, network segmentation, encryption, key management, and vulnerability remediation.
• Engineer centralized logging, telemetry, detections, alerting, and automated response using Microsoft Sentinel, Microsoft Defender XDR, Azure Monitor, AWS Cloud Trail, Amazon Guard Duty, AWS Security Hub, and related enterprise security platforms.
• Create and tune analytics, detections, hunting queries, dashboards, workbooks, and response automations using KQL and other supported query or scripting languages. Reduce false positives while preserving detection coverage and evidence quality.
• Lead or support cloud incident response, containment, forensic acquisition, root-cause…