Cloud Security Engineer

The Cloud Security Engineer designs, implements, and operates security controls across the organization’s cloud environments. This position partners with cloud platform, infrastructure, application, Dev Ops, architecture, risk, and compliance teams to protect cloud workloads and data while enabling secure business delivery. The successful candidate must be familiar with cloud-native security services, identity and access management, network security, data protection, logging and monitoring, vulnerability management, incident response, and secure cloud architecture practices.

• Design, implement, and maintain security controls and reference architectures for cloud environments across IaaS, PaaS, container, serverless, and managed-service workloads.
• Manage and optimize Cloud Security Posture Management (CSPM) and related cloud-native security tools, including onboarding accounts and subscriptions, tuning policies, validating findings, reporting risk, and coordinating remediation.
• Build, deploy, and maintain preventive and detective cloud guardrails through policy as code, infrastructure as code, automated compliance checks, and cloud-native policy services.
• Develop, publish, and maintain cloud security standards, baselines, patterns, and procedures aligned with business requirements, regulatory obligations, and recognized security frameworks.
• Partner with cloud platform, Dev Ops, application, and architecture teams to embed security requirements into landing zones, CI/CD pipelines, templates, and solution designs.
• Review cloud architectures and configurations for identity and access management, network segmentation, private connectivity, encryption, key management, secrets management, logging, and data protection.
• Implement and maintain least-privilege access models, privileged access controls, service identities, and workload identity protections across AWS and Azure.
• Monitor and investigate cloud security findings, misconfigurations, vulnerabilities, anomalous activity, and policy violations, and coordinate risk-based remediation with accountable teams
• Create and maintain cloud security documentation, diagrams, runbooks, metrics, and risk reports for technical and leadership audience
• Participate in the Security Engineering team on-call rotation.

The Cloud Security Engineer designs, implements, and operates security controls across the organization’s cloud environments. This position partners with cloud platform, infrastructure, application, Dev Ops, architecture, risk, and compliance teams to protect cloud workloads and data while enabling secure business delivery. The successful candidate must be familiar with cloud-native security services, identity and access management, network security, data protection, logging and monitoring, vulnerability management, incident response, and secure cloud architecture practices.

The following job functions are not all-inclusive. The employee will be required to perform other job-related tasks/responsibilities as requested. Job duties may change as required by needs of company.

• Design, implement, and maintain security controls and reference architectures for cloud environments across IaaS, PaaS, container, serverless, and managed-service workloads.
• Manage and optimize Cloud Security Posture Management (CSPM) and related cloud-native security tools, including onboarding accounts and subscriptions, tuning policies, validating findings, reporting risk, and coordinating remediation.
• Build, deploy, and maintain preventive and detective cloud guardrails through policy as code, infrastructure as code, automated compliance checks, and cloud-native policy services.
• Develop, publish, and maintain cloud security standards, baselines, patterns, and procedures aligned with business requirements, regulatory obligations, and recognized security frameworks.
• Partner with cloud platform, Dev Ops, application, and architecture teams to embed security requirements into landing zones, CI/CD pipelines, templates, and solution designs.
• Review cloud architectures and configurations for identity and access management, network segmentation, private connectivity, encryption, key management, secrets management, logging, and data protection.
• Implement and maintain least-privilege access models, privileged access controls, service identities, and workload identity protections across AWS and Azure.
• Monitor and…