Cloud Security Engineer
Core
Design, implement, and maintain secure cloud architecture, landing zones, and guardrails for AWS and Azure environments, focusing on hardening infrastructure and automating security compliance.
Role type
Cloud Security Engineer (IC)
Builds
Secure cloud architectures, landing zones, guardrails, and automated security controls for AWS and Azure platforms.
Domain
Cloud Security, Infrastructure as Code, Public Sector/GCC Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cloud security assessment, secure architecture design, Infrastructure as Code (Terraform, CloudFormation), IAM/PAM/Zero Trust, vulnerability management, compliance governance (CIS, NIST, ISO), CI/CD integration, container/Kubernetes security, threat detection, incident response.
Preferred skills
GCC and public sector cloud experience, CSPM/CWPP/CNAPP tools (Wiz, Prisma Cloud), SAST/DAST/SCA tools, cloud-native security testing.
Technologies
AWS (IAM, Control Tower, GuardDuty, WAF), Azure (Microsoft Entra ID, Defender for Cloud, Sentinel), GitLab, Azure DevOps, Jenkins, Terraform, CloudFormation, Bicep, Kubernetes (AKS, EKS).
Responsibilities
Conduct cloud security assessments and risk reviews; design and implement secure cloud architecture and landing zones; harden cloud infrastructure and services; develop IaC scripts for automation; manage identity and access controls; configure network security and encryption; maintain security monitoring and incident response; integrate security into CI/CD pipelines; perform vulnerability assessments and remediation; ensure compliance with security policies and public sector requirements.
Seniority
Mid-Senior, hands-on IC