Cloud Security Engineer

Cloud Security Engineer Job#: 3051948

Job Description:

Cloud Security Engineer

Location:

Omaha, Nebraska (Onsite)

Role Overview An organization is seeking a Cloud Security Engineer to take ownership of security across cloud workloads and SaaS migrations. This person will help design and implement cloud guardrails, improve cloud-security posture, support secure application migrations, and partner with cloud-platform and vulnerability-management teams. The organization primarily uses Microsoft Azure, but candidates with strong AWS or Google Cloud security experience may be considered if they can demonstrate transferable cloud-security fundamentals and the ability to adapt to Azure.

Key Responsibilities Design, implement, and maintain security controls and guardrails for cloud environments.

Take hands-on ownership of cloud-security posture and control implementation.

Evaluate cloud workloads, applications, identities, configurations, and services for security risk.

Support secure application, workload, and SaaS migrations.

Establish security requirements throughout the migration lifecycle, from design through production.

Use cloud-security posture management and cloud-native application protection tooling to identify and prioritize risks.

Work with platform and application teams to remediate cloud-security findings.

Partner with a principal engineer on cloud-security architecture and implementation.

Collaborate with vulnerability-management, infrastructure, identity, application, and development teams.

Help define cloud-security standards, patterns, controls, and operating procedures.

Validate that implemented controls are working as intended.

Provide technical guidance on cloud misconfigurations, excessive permissions, exposed services, insecure workloads, and related risks.

Support a low-volume on-call rotation.

Required Qualifications Five or more years of relevant experience in cloud engineering, cloud security, infrastructure security, or a related technical discipline.

Hands-on experience implementing cloud-security controls, guardrails, or security configurations.

Experience securing Microsoft Azure, AWS, or Google Cloud environments.

Understanding of cloud identity, networking, workload, data, configuration, and platform-security concepts.

Experience using cloud-security posture management, CNAPP, CSPM, or comparable cloud-security tools.

Experience supporting the security of a cloud workload, application, or SaaS migration.

Ability to move between security design and hands-on implementation.

Ability to explain specifically what was personally configured, deployed, tested, or remediated.

Strong troubleshooting and cross-functional collaboration skills.

Ability to work with cloud-platform, application, identity, and vulnerability-management teams.

Willingness to work primarily onsite.

Preferred Qualifications Hands-on Microsoft Azure security experience.

Experience with Wiz or a comparable CNAPP/CSPM platform.

Experience defining or implementing Azure security guardrails.

Experience securing enterprise SaaS migrations, including CRM or other business-critical platforms.

Experience with Microsoft Defender for Cloud, Azure Policy, Entra , or other Azure security services.

Experience with cloud vulnerability management and risk-based remediation.

Experience with scripting, automation, infrastructure as code, or policy as code.

Experience improving cloud-security posture across a large enterprise environment.

Experience working with application and platform teams throughout the full migration lifecycle.

Relevant cloud or security certifications.

Work Environment This position currently follows a hybrid model with four days onsite and one day remote per week. Candidates should be comfortable working collaboratively in an…