Cloud Security Engineer

Azure & AWS Cloud Security Engineer - 100% Remote - 6 Month Contract W-2 Only Pay Rate: $70/hr-$80 Per hour W-2 Only
- Corp-to-Corp (C2C) candidates will not be considered.

CBTS is seeking a Cloud Security Engineer to strengthen the security posture of its Microsoft Azure and Amazon Web Services (AWS) environments. In this 6-month contract role, you will design and enforce cloud security guardrails, harden identity and network controls, improve detection and incident response, and automate security through code. You'll work with cloud, infrastructure, and security teams in a regulated healthcare environment, where protecting sensitive member data is critical.

• Design, implement, and review identity and access controls across Azure (Entra , RBAC, PIM) and AWS (IAM, SCPs, Identity Center).
• Enforce least privilege, role-based access, MFA, and conditional access.
• Identify and remediate excessive permissions, orphaned identities, and risky service principles and roles.

• Define and implement security architecture patterns and preventive and detective guardrails (e.g., Azure Policy, AWS Config, Security Hub).
• Establish secure landing zones and baseline configurations aligned to industry benchmarks such as CIS and NIST.
• Review cloud designs and provide security guidance to engineering teams.

• Secure cloud networks using segmentation, NSGs and security groups, firewalls, private endpoints, and WAF.
• Harden workloads including VMs, containers, Kubernetes, and serverless, and manage vulnerabilities and misconfigurations.
• Apply encryption, key management, and secrets management best practices.

• Build and tune monitoring and alerting using tools such as Microsoft Defender for Cloud, Microsoft Sentinel, AWS Guard Duty, and Cloud Trail.
• Support investigation and response for cloud security incidents and contribute to runbooks and post-incident reviews.
• Integrate cloud telemetry with SIEM and SOC workflows.

• Embed security into IaC (Terraform, Bicep, ARM, Cloud Formation) and CI/CD pipelines, including policy-as-code and automated scanning.
• Automate remediation and compliance checks using scripting (Python, Power Shell, Bash).
• Document controls and produce evidence to support audit and compliance activities.

• Hands‑on experience securing both Azure and AWS in production environments.
• Strong experience in Cloud IAM and identity security
  .
• Demonstrated experience in cloud security architecture and guardrails
  .
• Experience with network and workload security in the cloud.
• Experience with detection, monitoring, and incident response in cloud environments.
• Proficiency in Infrastructure-as-Code and security automation (e.g., Terraform, Bicep, Cloud Formation, Python, Power Shell).
• Ability to work independently in a fully remote, fast-moving contract role.
• Experience in healthcare, insurance, or other regulated industries (HIPAA, HITRUST, SOC
  2).
• Relevant certifications such as AWS Certified Security – Specialty
  , Microsoft SC-100 or AZ-500, CISSP, or CCSP.
• Experience with CSPM and CNAPP tools and Dev Sec Ops  practices
  .

CBTS provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws.