Sr. Cloud Security Engineer

Job Description

Key Responsibilities

• Design, implement, and maintain cloud security architectures across public and hybrid cloud environments.
• Develop and manage security controls that protect cloud infrastructure, applications, containers, and enterprise data.
• Lead implementation of Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), Data Security Posture Management (DSPM), SaaS Security Posture Management (SSPM), and related cloud security technologies.
• Develop security automation and remediation workflows to improve operational efficiency and reduce response times.
• Partner with Governance, Risk, and Compliance (GRC), Infrastructure, DevOps, and Engineering teams to ensure cloud solutions meet organizational security standards.
• Evaluate emerging cloud security technologies and recommend improvements that strengthen the organization's overall security posture.
• Define cloud security architecture standards, technical documentation, implementation guides, and operational procedures.
• Build and maintain security monitoring, logging, and alerting capabilities across cloud platforms.
• Implement Zero Trust security principles, identity protection, secure access controls, and least-privilege models.
• Secure containerized workloads, Kubernetes environments, APIs, and cloud-native applications.
• Collaborate with engineering teams to integrate security into cloud deployments and CI/CD pipelines.
• Participate in architecture reviews, threat modeling, and security assessments for new cloud initiatives.
• Develop automation scripts and infrastructure-as-code solutions that improve security operations and compliance.
• Stay current on emerging cloud threats, attack techniques, and evolving security technologies.

Qualifications

Required Qualifications

• 10+ years of Information Security experience, including significant experience supporting enterprise-scale cloud environments.
• 5+ years designing and implementing cloud security solutions in AWS, Azure, or Google Cloud Platform.
• Strong understanding of Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWPP), DSPM, SSPM, and cloud-native security services.
• Experience securing container platforms such as Kubernetes and Docker.
• Knowledge of Zero Trust Architecture, Identity and Access Management (IAM), privileged access, and secure authentication technologies.
• Experience implementing cloud logging, monitoring, SIEM integrations, and threat detection solutions.
• Experience with Infrastructure as Code (Terraform, CloudFormation, or similar) and security automation.
• Ability to design enterprise cloud security architectures aligned with industry frameworks and compliance requirements.
• Strong scripting or automation experience using PowerShell, Python, Bash, or similar languages.
• Excellent communication skills with the ability to collaborate across technical and business teams.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related discipline preferred. Relevant cloud and security certifications are highly desirable.

Additional Information

Preferred Technical Skills

• AWS, Microsoft Azure, or Google Cloud Platform
• Cloud Security Posture Management (CSPM)
• Cloud Workload Protection Platforms (CWPP)
• Data Security Posture Management (DSPM)
• SaaS Security Posture Management (SSPM)
• Kubernetes & Container Security
• Zero Trust Architecture
• Identity & Access Management (IAM)
• Microsoft Entra ID / Okta
• SIEM & Cloud Logging
• Security Automation & Orchestration
• Infrastructure as Code (Terraform, CloudFormation)
• CI/CD Security
• Threat Detection & Incident Response
• Cloud Compliance & Security Frameworks

Core Competencies

• Strategic problem-solving and analytical thinking
• Strong technical leadership and collaboration skills
• Ability to influence cross-functional teams and drive security initiatives
• Excellent written and verbal communication
• Adaptability in fast-changing cloud environments
• Strong planning, prioritization, and execution skills
• Continuous learning and commitment to cybersecurity best practices

Cloud Security (AWS, Azure, GCP, CSPM, CWPP, DSPM, SSPM)

Identity & Zero Trust (IAM, Entra ID, Okta, SSO, MFA, PAM)

Cloud Security Automation (Terraform, Python, PowerShell, CI/CD Security, Security Orchestration)