Senior Cloud Security Engineer

Join one of the nation's leading retail automotive chains in a full-time, on-site role as a Senior Cloud Security Engineer
. In this position, you will be part of a high-performing IT Security team, responsible for leading the design, implementation, and governance of security controls across a multi-cloud environment. This role has primary responsibility for securing Microsoft Azure environments and supporting a Secure Software Development Lifecycle (SDLC) using Git Hub. You will partner closely with Cloud Engineering, Application Development, Dev Ops, and Security Operations to ensure platforms and pipelines are secure by design, resilient, and compliant with regulatory standards.

The ideal candidate brings strong hands‑on cloud security expertise, sound architectural judgment, and the ability to translate security strategy into scalable, practical solutions. This position reports directly to senior cybersecurity leadership.

• Define and lead cloud security standards across identity, networking, compute, storage, containers, and platform services
• Act as a subject‑matter expert in cloud threat modeling, attack paths, and risk prioritization
• Collaborate with infrastructure teams to embed security into cloud platform design, leveraging automation wherever possible
• Design and manage security controls across Azure and AWS environments, including IaaS, PaaS, and serverless workloads
• Implement and optimize cloud security tools (e.g., CSPM, CWPP, CIEM) to detect misconfigurations and prevent runtime threats
• Integrate security into CI/CD pipelines and Git Hub workflows, enabling automated vulnerability scanning and code‑to‑cloud visibility
• Ensure alignment with industry standards such as NIST and CIS Controls
• Translate security best practices into documented, audit‑ready technical controls

• Bachelor’s degree in Information Technology, Computer Science, or related field (or equivalent experience)
• 7+ years of information security experience, including 3+ years focused on cloud security architecture
• Hands‑on experience securing Microsoft Azure and AWS in enterprise environments
• Strong knowledge of:
• Cloud IAM and identity federation
• Network segmentation and cloud‑native firewalls
• Encryption and key management (KMS/HSM)
• Container and Kubernetes security
• Experience implementing Secure SDLC / Dev Sec Ops  practices, especially within Git Hub environments
• Relevant certifications preferred (e.g., CISSP, GIAC, Azure Security Engineer Associate, AWS Security Specialty)
• Excellent communication skills with the ability to influence both technical and business stakeholders

Mavis is an Equal Opportunity Employer

Consistent with our commitment to the principle of equal employment opportunity for all individuals, we enforce a zero‑tolerance policy on discrimination loyment decisions are made without regard to an applicant's or employee's actual or perceived race, color, religion, creed, sex, pregnancy, sexual orientation, national origin, age, ancestry, ethnicity, disability, citizenship, alienage, marital status, domestic or civil union partnership status, familial status, caregiver status, military or veteran status, transgender status, gender identity or expression, genetic information, predisposing genetic characteristic, status as a victim of domestic violence, stalking and sex offenses, or any other status protected by applicable federal, state or local laws, regulations or ordinances.

Exceptions or modifications to certain job duties and/or expected schedules may be provided for an employee who needs a reasonable accommodation for: (a) a sincerely held religious belief, observance or practice that conflicts with the expected schedule for a position; or (b) an otherwise qualified individual with a disability, unless such accommodation poses an undue hardship on our business, in accordance with applicable federal, state and local laws.

Additional information is available by contacting

We will endeavor to make a reasonable accommodation / modification to the known physical or mental limitations of a qualified applicant with a disability to assist in the hiring process, unless the accommodation would…