Cloud Security Engineer

Cloud Security Engineer

Location:

Dover, DE (Onsite)

Work Hours:

M-F (37 hours)

Shift: 1st Shift

This role requires a highly skilled and experienced cloud security professional with a deep understanding of securing cloud workloads, tools, and services. A strong preference would be given to candidates with prior Zero Trust Network Access (ZTNA) principles and a proven track record of implementing and managing secure cloud environments across multiple platforms. The ideal candidate will possess a strong combination of technical expertise and operational leadership.

Experience in GCP cloud services to the state's multi‑cloud program is desired.

• The candidate must have extensive experience in ZTNA engineering and automation, ensuring secure, scalable, and policy‑driven access control.
• Architecting and approving ZTNA configurations, implementing identity‑aware segmentation, enforcing least‑privilege access policies, and leading the transition from traditional VPNs to ZTNA solutions.
• Deep understanding of NIST 800‑207 and Zero Trust Architecture best practices, hands‑on experience with ZTNA technologies, particularly Zscaler.

• Comprehensive understanding of cloud security platforms and IaaS providers like Google, Amazon, and Microsoft.
• In‑depth knowledge of each provider's security services (e.g., IAM, security centers, firewalls, key management, logging, and monitoring tools) and ability to design and implement secure cloud architecture.
• Well‑versed in cloud‑native security controls, CSPM tools, and best practices for ensuring compliance with NIST, ISO, SOC 2.

• Working knowledge of IAM concepts and best practices, with specific experience in Okta preferred.
• Proficient in implementing least‑privilege access controls, federation, single sign‑on (SSO), and other IAM solutions across multiple cloud platforms.

• Strong understanding of automation pipelines and experience with scripting and automation tools such as Python, Terraform, Cloud Formation, and Azure Resource Manager.
• Experience with Security Orchestration, Automation and Response (SOAR) platforms.

• Experience with SIEM logging and analysis, and understanding of EDR and XDR concepts.
• Capable of analyzing security logs and alerts, conducting threat hunting, and participating in incident response procedures and methodologies.

• Working knowledge of current security policies, federal and state compliance regulations, and governance standards.
• Experience with cloud‑specific compliance frameworks like FedRAMP.

• Understanding of data classification standards and experience with data loss prevention (DLP) configurations.

• Deep understanding of modern networking standards, including Zero Trust principles.
• Extensive experience with firewall management, IDS/IPS, network segmentation, VPNs, routing and switching protocols, network traffic analysis, and security tools such as Wireshark and tcpdump.
• Experience with NAC, DNS security, load balancers, and web application firewalls (WAFs).

• Understanding of endpoint security concepts and technologies.

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• Relevant certifications such as CISSP, CCSP, AWS Certified Security – Specialty, Google Cloud Certified Professional Cloud Security Engineer, Microsoft Certified:
  Azure Security Engineer Associate.

• Minimum of 7–10 years of experience in information security, focusing on cloud security and ZTNA.
• Significant experience with GCP, AWS, and/or Azure.
• Demonstrated experience in implementing and managing ZTNA solutions.

• Extensive experience in ZTNA engineering and automation.
• Experience with Security Information and Event Management (SIEM).
• Understanding of data classification standards and DLP configurations.
• Understanding of endpoint security concepts and technologies.
• Strong analytical and problem‑solving…