Cloud Security Engineer

Key Responsibilities

• Design and implement IAM architecture including permission boundaries, service control policies, and privileged access management.
• Build security baselines and guardrails using Terraform, Pulumi, or CloudFormation.
• Automate compliance checks using AWS Config, Azure Policy, or OPA.
• Develop and maintain cloud detection pipelines that ingest and enrich cloud API events.
• Implement monitoring and incident response procedures for cloud environments.
• Harden Kubernetes and container environments (image scanning, network policies, runtime protection).
• Implement encryption, key management, and secure storage configurations.
• C Conduct architecture reviews and provide actionable security requirements.
• Support incident response by building containment automation and long-term preventive controls.
• Ensure alignment with frameworks such as NIST RMF, FedRAMP, SOC2 Type 2, CJIS, CMMC, GDPR, HIPAA, and PCI-DSS depending on industry.

Requirements

• Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent experience.
• 4-8 years of experience in cloud security or cloud engineering.
• Hands-on experience with AWS, Azure, or GCP security services.
• Certifications such as AWS Security Specialty, Azure Security Engineer (AZ-500), CCSP, or CKS are highly desirable.
• Strong understanding of IAM, encryption, network security, and cloud service models (IaaS/PaaS/SaaS).
• Proficiency with Terraform, Python, Kubernetes security, and CSPM tools.