Cloud Database Engineer

We are seeking a Cloud Database Security Engineer to support the design and implementation of secure database platforms across private and public cloud environments. This role focuses on database security architecture, access governance, monitoring modernization, and cloud security posture, with limited operational responsibility.

Key Responsibilities

• Support hybrid and cloud database onboarding, ensuring secure connectivity, governance, and compliance.

• Contribute to the modernization of database monitoring and management, transitioning from legacy tooling to cloud-native or centralized observability platforms.

• Participate in cloud database platform evaluations, including:
o Onboarding and access management requirements
o Deployment and hosting model assessments
o Monitoring, logging, and observability capabilities
o Database inventory and asset management

• Design and support data access controls, including fine-grained authorization mechanisms.

• Support privileged access governance for managed database services in cloud environments.

• Enhance cloud database security posture through alerting, risk identification, and remediation guidance.

• Produce architecture documentation, security standards, and evaluation deliverables.

Required Skills & Experience

• Strong experience with Microsoft SQL Server (Enterprise and Standard)

• Experience with cloud-based managed database services like AWS RDS, Azure SQL

• Solid understanding of database security concepts, including:
o Identity and access management
o Least-privilege access models
o Auditing and logging
o Fine-grained data access controls

• Understanding of privileged access management (PAM) concepts

• Familiarity with security monitoring, alerting, and observability principles

• Strong documentation and stakeholder communication skills

Nice to Have

• Experience with multiple database engines, Oracle, MySQL

• Exposure to centralized logging or security analytics platforms

• Experience applying Zero Trust principles to database access controls and privileged access governance