Principal Cloud Security Engineer

Cloud Security Engineering (CSE) is responsible for protecting Pega’s cloud infrastructure, applications, and data across AWS and GCP environments. The team partners closely with Cloud Operations, Service Reliability, and Engineering to ensure our environments are secure, scalable, and resilient.

You will join a fast‑paced team dedicated to maintaining and improving cloud security systems and infrastructure to support mission‑critical applications. In this role, you will own and deliver improvements for security‑related systems, collaborate with stakeholders for change management, assist in incident response, and support ongoing improvements to cloud security practices and governance.

• Own the implementation and maintenance of critical cloud security systems and supporting infrastructure
• Automate manual system administration and infrastructure tasks
• Contribute to the strategic direction of security controls across multiple cloud providers
• Assist with vulnerability management, remediation tracking, and risk mitigation efforts
• Partner with Cloud Operations and Engineering teams to provide guidance on secure configurations and best practices
• Help maintain and improve security policies, standards, and procedures
• Stay current on emerging cloud security threats and trends

• Passionate about cloud technologies and security best practices and have strong opinions about AI security
• Hands‑on experience with AWS core services (EC2, VPC)
• Familiarity with infrastructure‑as‑code tools (Terraform, Cloud Formation)
• Comfortable with scripting (Python, Ansible, Power Shell or similar)
• Strong problem‑solving skills with the ability to troubleshoot and expand appropriately
• Collaborative team player with strong communication skills

Required:

• 8+ years of experience in cloud engineering, cloud operations, SRT, SRE, Dev Ops, cloud security in cloud environments
• Demonstrated strong understanding of cloud security concepts and controls
• Experience automating and securing Linux systems and cloud‑based infrastructure (SELinux, FIPS)
• Experience with security monitoring, alerting, or incident response (Splunk, Chronicle, Crowd Strike)
• Experience with containerized deployments

Preferred:

• Experience with Kubernetes
• Experience with multiple Linux distributions
• Work in FedRAMP or DOD Impact Level‑rated environments
• Exposure to Dev Ops tools and CI/CD pipelines
• Familiarity with API integrations or modern cloud‑native architectures
• Windows System Administration, automation

• Gartner Analyst acclaimed technology leadership across our categories of products
• Continuous learning and development opportunities
• An innovative, inclusive, agile, flexible, and fun work environment
• Competitive global benefits program inclusive of pay + bonus incentive, employee equity in the company #LI-KH2

Base salary range for this role is 122,600 – 186,800 USD annually. This role may also be eligible for annual bonus or commission, as well as benefits and other incentives. The final compensation will be determined during the offer process based on the candidate’s education, experience, skills, and qualifications, as well as market conditions and may vary from the posted range.

We will share information on benefits, bonus/commission, and other pay components for this role at the relevant recruitment stage.

As an Equal Opportunity employer, Pegasystems will not discriminate in its employment practices due to an applicant’s race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, veteran or disability status, or any other category protected by law.