Sr Cloud Security Engineer I

Accountabilities

• • Partner with cloud and technology teams to architect, implement, and maintain secure cloud solutions across enterprise environments.
  • Implement, monitor, and support cloud security technologies that help maintain compliance with HITRUST, the CSA Cloud Controls Matrix, and other applicable standards.
  • Deploy and maintain security controls and detection technologies, including Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWP), cloud access security capabilities, next-generation firewalls, container security, and automated compliance tools.
  • Evaluate existing and emerging security applications and tools, recommend improvements, and support their integration with current technology environments.
  • Establish and maintain security standards across network, infrastructure, system, application, and cloud implementations.
  • Design and implement security controls for Microsoft Azure IaaS and PaaS environments, with consideration for AWS and SaaS platforms where applicable.
  • Identify security risks and recommend improvements to policies, procedures, configurations, and controls to mitigate vulnerabilities and compliance gaps.
  • Work with business units and technical stakeholders to strengthen security policies, procedures, governance, and operational practices.
  • Develop and maintain cloud security documentation, standards, policies, procedures, and governance models.
  • Partner with system engineering and DevOps teams to assess, prioritize, and reduce cloud security risks.
  • Conduct hardening reviews and assessments with developers, operations, infrastructure, and engineering teams.
  • Support cloud security monitoring, logging, auditing, anomaly detection, and cybersecurity risk management activities.
  • Contribute to cloud security strategy and establish appropriate security guardrails for emerging technologies, including artificial intelligence cloud architectures.
  • Stay current with cybersecurity threats, risk intelligence, governance requirements, cloud security trends, and evolving industry practices.

  Requirements

  • Bachelor’s degree in a relevant discipline or equivalent professional experience; a high school diploma is required when qualifying through equivalent experience.
  • At least 5 years of experience working with enterprise cloud environments, including IaaS, PaaS, and SaaS; professional cloud security experience is strongly preferred.
  • Strong hands-on experience with Microsoft Azure cloud architecture and security, with additional experience securing AWS environments highly valuable.
  • Experience with CSPM and CWP technologies such as Microsoft Defender for Cloud, AWS Security Hub, or AWS Config.
  • In-depth knowledge of Azure Policy and/or AWS Service Control Policies.
  • Experience with Infrastructure as Code technologies such as Terraform or Azure Bicep is preferred.
  • Strong understanding of cloud networking concepts, including routing, traffic filtering, firewalls, load balancing, and related security controls.
  • Experience securing cloud-hosted containers and working with DevOps and CI/CD tooling.
  • Demonstrated experience hardening AWS and/or Azure services and implementing cloud security controls.
  • Knowledge of the CSA Cloud Controls Matrix and CIS Benchmarks for cloud environments.
  • Strong understanding of host hardening, auditing, logging, monitoring, network security, anomaly detection, cybersecurity risk, threat intelligence, and governance.
  • Ability to translate business and technical requirements into secure, scalable, and reliable cloud solutions.
  • Strong critical-thinking, analytical, problem-solving, and decision-making skills.
  • Excellent communication and stakeholder-management abilities, with the capacity to build cooperative relationships across technical and business teams.
  • Strong organizational and time-management skills, with the ability to prioritize, multitask, and maintain accuracy in a changing environment.
  • Ability to handle confidential information with discretion and professionalism.
  • Relevant certifications are preferred, including CCSP, AWS Certified Developer, CSA certifications, or Microsoft Azure Solutions Architect credentials.

  Benefits

  • Annual full-time salary range of $146,232–$180,000 USD, depending on qualifications, education, experience, skills, and internal equity.
  • Fully remote work arrangement.
  • Remote onboarding and training.
  • Company-provided technology equipment for the work-from-home environment.
  • Opportunity to work on enterprise cloud security architecture, governance, compliance, and risk reduction initiatives.
  • Exposure to Azure, AWS, cloud-native security, DevOps, container security, Infrastructure as Code, and emerging AI cloud architectures.
  • Collaborative environment with cross-functional interaction across cloud, infrastructure, engineering, DevOps, security, and business teams.
  • Work-from-home setup requiring a stable internet connection with a minimum recommended speed of 50 Mbps download / 10 Mbps upload; 100/20 Mbps is recommended for higher-quality video meetings.
  • Primarily sedentary work environment with no special physical demands; occasional travel may be required.