Cloud admin or analyst

Position Summary

The Senior Cloud Administrator owns the day-to-day administration and hardening of security controls across the organization's cloud infrastructure and SaaS ecosystem. This role runs CSPM/SSPM tooling, manages IAM/SSO/MFA programs, and drives remediation directly, working closely with IT and business teams. The ideal candidate has deep hands-on experience operating these tools and programs themselves — not directing others to do so — and can exercise sound judgment on day-to-day security issues with minimal oversight.

Responsibilities

• Cloud Security
  • Administer and harden cloud security controls across AWS, Azure, and/or GCP
  • Maintain cloud security standards and reference documentation
  • Review cloud deployment configurations for adherence to security baselines and flag deviations
  • Run and administer Cloud Security Posture Management (CSPM) tools — configure policies, tune detections, triage findings, and drive misconfigurations to resolution
  • Maintain control mappings against applicable compliance frameworks (CIS, NIST, SOC 2, ISO 27001, etc.)
• SaaS Security
  • Maintain SaaS security configuration standards
  • Run and administer SaaS Security Posture Management (SSPM) tools — configure policies, monitor for drift, and remediate findings directly
  • Own IAM administration for SaaS platforms — configure and manage SSO, MFA, and provisioning/deprovisioning workflows end-to-end
  • Review SaaS integrations and third-party connections against security guidelines and remediate gaps
• Secure Configuration, Governance & Compliance
  • Conduct cloud and SaaS security assessments and configuration audits; execute remediation directly
  • Monitor cloud infrastructure and SaaS platforms for suspicious activity, risky configuration changes, unauthorized access, and abnormal behavior
  • Maintain detections, alerts, and incident response workflows
  • Investigate cloud and SaaS security incidents; perform root-cause analysis and implement fixes to prevent recurrence
  • Identify, track, and prioritize vulnerabilities, misconfigurations, and audit/pen-test findings
  • Work directly with IT and business stakeholders to execute mitigation and remediation plans
  • Mentor junior administrators on tooling and remediation practices
  • Perform other duties as assigned or needed

Required Qualifications

• Bachelor's degree in a technology-related discipline, or demonstrated equivalent experience
• 3–6+ years of hands-on experience in Cloud Security, Cybersecurity, IAM Administration, or Cloud Engineering
• Direct, hands-on experience configuring and running CSPM and/or SSPM tools (not just consuming reports)
• Direct, hands-on experience managing IAM/SSO/MFA — configuration, provisioning/deprovisioning, and troubleshooting
• Working knowledge of information security tools and concepts across Endpoint Security, Identity Management, or related domains
• Proficiency in at least one of the following (or similar): Cloud/SaaS Security, SIEM, EDR, Web Security, Firewall, Email Security, NDR, Password Management, Privileged Access Management, PCI Compliance, GRC, Vulnerability Management, BCP, DR
• Strong analytical and troubleshooting skills with attention to detail; able to exercise judgment on ambiguous issues with minimal oversight
• Ability to participate in an on-call rotation to troubleshoot and respond to security incidents
• Track record of implementing and managing security tools/controls for servers, endpoints, cloud, or network systems
• Strong communication skills for working directly with IT and business stakeholders on remediation

Preferred Qualifications

• Retail industry experience
• Cloud security certifications (e.g., AWS, Azure, or GCP security certifications)
• CompTIA Security+
• Progress toward CISSP or similar advanced certification

Engagement Details

This is a contract-to-hire engagement through Catapult Solutions Group. The contractor will be assigned to a third-party end client for the duration of the contract.