Senior Cloud Security Engineer

Role overview

Responsibilities

• Design highly available AWS architectures and embed security controls, vulnerability scanning, and compliance checks into CI/CD pipelines.
• Develop infrastructure as code and secure CI/CD pipelines using Terraform, CloudFormation, Ansible, GitLab CI/CD, Jenkins, and GitOps.
• Manage IAM, PAM, identity federation, access governance, and third-party identity integrations.
• Integrate SIEM, SOAR, EDR, and CSPM tools; automate incident response and remediation with AWS Lambda, Step Functions, and other cloud services.
• Apply security governance aligned with NIST, CIS Benchmarks, FedRAMP, and other applicable standards.
• Secure Docker, Kubernetes, and Amazon EKS workloads; manage vulnerability remediation, endpoint protection, and cloud security posture.
• Design secure cloud networking, encryption, key and secrets management, and data protection controls.
• Establish monitoring, logging, alerting, and observability with tools including Splunk, Prometheus, Grafana, and Datadog.
• Design and test disaster recovery, business continuity, multi-region resilience, and high availability.
• Automate operations with Python, Bash, and PowerShell; conduct security assessments, audits, risk analysis, and root-cause investigations.
• Collaborate with Security, DevOps, and Engineering teams; provide technical guidance and mentorship to junior engineers.

Required qualifications

• Strong hands-on AWS experience across compute, storage, networking, IAM, and cloud security.
• Proven DevSecOps, CI/CD automation, GitOps, and secure software delivery experience.
• Proficiency with Terraform, CloudFormation, and Ansible for provisioning and configuration management.
• Experience with SIEM, SOAR, EDR, and CSPM technologies; Splunk, CrowdStrike, Qualys, and Wiz are examples.
• Strong understanding of IAM, PAM, identity federation, encryption, AWS KMS, secrets management, and network security.
• Hands-on experience securing Docker, Kubernetes, and Amazon EKS environments.
• Strong scripting and automation skills using Python, Bash, and/or PowerShell.
• Experience with security monitoring, incident response, vulnerability management, and automated remediation.
• Knowledge of NIST, CIS, and FedRAMP cloud security and compliance frameworks.
• Understanding of high availability, disaster recovery, business continuity, and multi-region cloud architectures.
• Strong troubleshooting, analytical, communication, and cross-functional collaboration skills.

Preferred qualifications

• AWS Certified Solutions Architect – Professional or AWS Certified Security – Specialty.
• Experience with Azure or multi-cloud security environments.
• Practical experience implementing FedRAMP, NIST, or CIS controls; exposure to AI/ML security, cloud workload protection, and emerging cloud security technologies.
• Experience leading cloud security initiatives and mentoring technical teams.