Cloud Security Specialist

Responsibilities

• Cloud security design & implementation
• Contribute to and maintain cloud security reference architectures, standards, and implementation patterns for IaaS, PaaS, containers/Kubernetes, and serverless workloads
• Partner with engineering and platform teams to apply approved security patterns in new and existing cloud workloads
• Help implement and operate secure cloud landing zone controls including account/project structures, network segmentation, IAM boundaries, logging, and policy guardrails
• Implement least-privilege IAM for workforce and workload identities
• Apply encryption, key management, tokenization, and data handling standards for sensitive data including payment and healthcare data
• Participate in threat modeling and security design reviews for cloud services and applications
• Ensure required cloud audit logs, telemetry, and security signals are enabled and flowing to centralized monitoring
• Help define and maintain cloud hardening baselines, container/image standards, and configuration compliance controls
• Partner with GRC and audit teams to map technical cloud controls to compliance frameworks

• 3+ years of hands-on experience securing workloads in public cloud environments (Google Cloud Platform (GCP), AWS, or Azure)
• Multi-cloud experience preferred
• Solid understanding of core cloud security concepts: IAM, networking, segmentation, logging/monitoring, encryption, key management, secrets management, and workload security
• Experience using infrastructure-as-code and automation tools (e.g., Terraform, Cloud Formation, Bicep) and supporting CI/CD pipelines
• Familiarity with container and/or Kubernetes security fundamentals
• Experience participating in threat modeling or security design reviews
• Strong written and verbal communication skills; able to document designs and explain security requirements to engineering teams
• Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent practical experience)