Cloud Administrator

Location: Onsite in Boise,  Phoenix, AZ

Duration: 6 months, contract-to-hire

Work Authorization: U.S. Citizen or Green Card holder required

The Senior Cloud Administrator owns the day-to-day administration and hardening of security controls across the organization's cloud infrastructure and SaaS ecosystem. This role runs CSPM/SSPM tooling, manages IAM/SSO/MFA programs, and drives remediation directly, working closely with IT and business teams. The ideal candidate has deep hands-on experience operating these tools and programs themselves — not directing others to do so — and can exercise sound judgment on day-to-day security issues with minimal oversight.

• Cloud Security Administer and harden cloud security controls across AWS, Azure, and/or GCP
• Maintain cloud security standards and reference documentation
• Review cloud deployment configurations for adherence to security baselines and flag deviations
• Run and administer Cloud Security Posture Management (CSPM) tools — configure policies, tune detections, triage findings, and drive misconfigurations to resolution
• SaaS Security Maintain SaaS security configuration standards
• Run and administer SaaS Security Posture Management (SSPM) tools — configure policies, monitor for drift, and remediate findings directly
• Own IAM administration for SaaS platforms — configure and manage SSO, MFA, and provisioning/deprovisioning workflows end-to-end
• Review SaaS integrations and third-party connections against security guidelines and remediate gaps
• Secure Configuration, Governance & Compliance Conduct cloud and SaaS security assessments and configuration audits; execute remediation directly
• Monitor cloud infrastructure and SaaS platforms for suspicious activity, risky configuration changes, unauthorized access, and abnormal behavior
• Maintain detections, alerts, and incident response workflows
• Investigate cloud and SaaS security incidents; perform root-cause analysis and implement fixes to prevent recurrence
• Identify, track, and prioritize vulnerabilities, misconfigurations, and audit/pen-test findings
• Work directly with IT and business stakeholders to execute mitigation and remediation plans
• Mentor junior administrators on tooling and remediation practices
• Perform other duties as assigned or needed

• Bachelor's degree in a technology-related discipline, or demonstrated equivalent experience
• 3–6+ years of hands-on experience in Cloud Security, Cybersecurity, IAM Administration, or Cloud Engineering
• Direct, hands-on experience configuring and running CSPM and/or SSPM tools (not just consuming reports)
• Direct, hands-on experience managing IAM/SSO/MFA — configuration, provisioning/deprovisioning, and troubleshooting
• Working knowledge of information security tools and concepts across Endpoint Security, Identity Management, or related domains
• Proficiency in at least one of the following (or similar):
  Cloud/SaaS Security, SIEM, EDR, Web Security, Firewall, Email Security, NDR, Password Management, Privileged Access Management, PCI Compliance, GRC, Vulnerability Management, BCP, DR
• Strong analytical and troubleshooting skills with attention to detail; able to exercise judgment on ambiguous issues with minimal oversight
• Ability to participate in an on-call rotation to troubleshoot and respond to security incidents
• Track record of implementing and managing security tools/controls for servers, endpoints, cloud, or network systems
• Strong communication skills for working directly with IT and business stakeholders on remediation

• Retail industry experience
• Cloud security certifications (e.g., AWS, Azure, or GCP security certifications)
• CompTIA Security+
• Progress toward CISSP or similar advanced certification
• This is a contract-to-hire engagement through Catapult Solutions Group. The contractor will be assigned to a third-party end client for the duration of the contract.