Senior Cloud Security Engineer

Power Plan is seeking a Senior Cloud Security Engineer to build our cloud security and IAM maturity programs from the ground up, rather than caretake an existing one. As a senior individual contributor, you'll own compliance, identity strategy, and security automation across both AWS and Azure.

Success here means shaping the roadmap leadership acts on, not just executing someone else's plan, with visible influence across Cloud Engineering, Information Security, and executive stakeholders within your first 90 days.

Power Plan helps the companies that power the world unlock greater value from their infrastructure investments. We combine deep industry expertise, trusted technology, and AI-driven innovation to help capital-intensive organizations manage the financial complexity of their assets with confidence.

We're in the middle of one of the most significant transformations in our history. Decades of proven functionality are being reimagined on a modern SaaS foundation, while AI becomes central to how we build, deliver, and evolve our products. The next generation of the Power Plan platform is being designed right now. Join us, and you'll have the opportunity to influence the technology, engineering practices, and capabilities that will shape it for years to come.

• Assess and close security framework compliance gaps across AWS and Azure, with a prioritized remediation roadmap by day 90.
• Build an IAM maturity roadmap from the current fragmented state to least-privilege enforcement and centralized oversight.
• Turn security and IAM requirements into enforced, production-grade code — Terraform modules and Python/Power Shell automation.
• Serve as the security subject matter expert in cloud architecture reviews and change advisory processes.
• Mentor Cloud Operations and Engineering teams on secure defaults so security shapes decisions before they ship.
• Lead incident response for cloud security events end-to-end, from detection through resolution.

Within 90 days, you'll have delivered a security framework assessment and IAM roadmap that leadership acts on. Within six months, least-privilege access and security-as-code will be real, not aspirational, and you'll be the trusted voice in the room whenever the organization changes its cloud environment.

• 8+ years of experience in cloud security, infrastructure security, or security engineering, with deep hands‑on experience across both AWS and Azure.
• Demonstrated experience implementing security frameworks such as CIS, NIST, or SOC 2 at scale.
• Strong IAM design and implementation background, including federation (SAML, OIDC), RBAC, ABAC, and privileged access management.
• Proficiency in Python and Power Shell for security automation, and hands‑on Terraform experience.
• A track record of translating security requirements into infrastructure‑as‑code guardrails integrated into CI/CD pipelines.
• Experience building or maturing a risk‑based or IAM program from an early or fragmented state.
• Experience leading incident response for security events and driving post‑incident corrective action.

• Bachelor's degree in a related field or equivalent professional experience.
• Excellent written and verbal communication skills, comfortable presenting security strategy to both engineers and executive leadership.

Power Plan is an EOE

Please note that this is a hybrid role that involves a combination of onsite work from our corporate office as well as work from home. While we strive to accommodate flexible working arrangements when sensible, there will be times when onsite work is required. This could include scheduled office days, team meetings, client meetings, or special events.