Cloud Security Engineer

Job Summary

We are seeking a highly skilled Cloud Security Engineer to join our cybersecurity team. In this role, you will design, implement, and maintain security controls across cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform (GCP). You will work closely with DevOps, Infrastructure, and Security Operations teams to protect cloud environments, ensure regulatory compliance, and respond to security incidents. The ideal candidate has strong expertise in cloud architecture, identity and access management (IAM), network security, and automation.

Key Responsibilities

• Design, implement, and manage secure cloud infrastructure across AWS, Azure, and GCP.
• Develop and enforce cloud security policies, standards, and best practices.
• Configure and maintain Identity and Access Management (IAM), Multi-Factor Authentication (MFA), and Role-Based Access Control (RBAC).
• Implement Zero Trust security architecture and cloud-native security controls.
• Monitor cloud environments using SIEM, CSPM, and cloud security monitoring tools.
• Perform cloud vulnerability assessments, risk analyses, and security audits.
• Secure Kubernetes clusters, containers, and serverless applications.
• Automate cloud security tasks using Infrastructure as Code (Terraform, CloudFormation, ARM/Bicep).
• Configure Web Application Firewalls (WAF), firewalls, VPNs, and network segmentation.
• Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps).
• Investigate and respond to cloud security incidents, threats, and vulnerabilities.
• Ensure compliance with industry standards such as ISO 27001, SOC 2, HIPAA, PCI-DSS, and NIST.
• Maintain cloud security documentation, policies, and incident reports.
• Stay up to date with emerging cloud threats, technologies, and security trends.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field (or equivalent experience).
• 3–7+ years of experience in cloud security or cybersecurity.
• Hands-on experience with AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Strong understanding of cloud networking, IAM, encryption, and security architecture.
• Experience with SIEM, CSPM, and cloud monitoring solutions.
• Knowledge of Infrastructure as Code (Terraform, CloudFormation, ARM/Bicep).
• Experience securing Kubernetes, Docker, and containerized workloads.
• Familiarity with scripting languages such as Python, PowerShell, or Bash.
• Knowledge of security frameworks including NIST, CIS Benchmarks, ISO 27001, and SOC 2.
• Excellent analytical, troubleshooting, and communication skills.

Preferred Qualifications

• Cloud security certifications such as AWS Certified Security – Specialty, Microsoft Azure Security Engineer (AZ-500), or Google Professional Cloud Security Engineer.
• Experience with Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework.
• Knowledge of CI/CD security and DevSecOps practices.
• Experience with threat detection, incident response, and digital forensics.
• Familiarity with compliance frameworks including FedRAMP and PCI-DSS.

Technical Skills

• Cloud Platforms: AWS, Microsoft Azure, Google Cloud Platform (GCP)
• Identity & Access: IAM, Azure AD, Entra ID, MFA, RBAC
• Cloud Security: CSPM, CWPP, WAF, Zero Trust, Cloud Firewall
• Containers: Docker, Kubernetes, Amazon EKS, Azure AKS, Google GKE
• Infrastructure as Code: Terraform, CloudFormation, ARM, Bicep
• Programming: Python, PowerShell, Bash
• Monitoring & SIEM: Microsoft Sentinel, Splunk, Microsoft Defender for Cloud, AWS Security Hub, Azure Monitor
• DevSecOps: GitHub Actions, Jenkins, Azure DevOps, GitLab CI/CD
• Compliance: NIST, ISO 27001, SOC 2, HIPAA, PCI-DSS, CIS Benchmarks

Preferred Certifications

• AWS Certified Security – Specialty
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Google Professional Cloud Security Engineer
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)

Benefits

• Competitive salary with annual performance bonus
• Medical, dental, and vision insurance
• Paid time off and company holidays
• Flexible remote/hybrid work options
• Professional certification reimbursement
• Learning and development opportunities
• Career growth within a global cybersecurity team