Cyber Cloud Solution Engineer Lead/Staff

About the role

Part of a larger team delivering high quality technology solutions to the business. Design, develop and install software solutions. Build high-quality, innovative and fully performing software in compliance with internal architecture, development & design standards & best practices. Design, modify, develop, write, implement and troubleshoot software programming applications. Support and/or install software applications. Participate in the testing process through test review and analysis, test witnessing and certification of software. Works within a Waterfall or Agile methodology/framework based team. Collaborates heavily with Project Management, Business Analyst and Infrastructure.

Responsibilities

• AWS Security Engineering: Design, build, and maintain enterprise-grade security controls utilizing third party SSE and native AWS security services.
• Multi-Cloud Support: Provide primary to AWS / secondary security engineering, posture management, and threat detection support for Azure, GCP, and OCI environments.
• DevSecOps & Automation: Work with our Cloud Engineering group to help operationalize Infrastructure as Code (IaC) and Policy as Code (PaC) to automate security guardrails, vulnerability scanning, and compliance checks.
• SSE Management: Architect and maintain policies within the third party SSE platform to protect corporate data and govern cloud applications across our primary cloud environments.
• Incident Response & Threat Hunting: Partner with our SOC to investigate cloud-specific security incidents, develop automated remediation playbooks, and conduct threat-modeling exercises.

Requirements

Essential Job Functions & Tasks Responsibilities include the following related to securing cloud compute, network, storage, and end user infrastructure:

Qualifications

• Deep, hands-on technical understanding and operational compatibility with AWS security services, including but not limited to: AWS IAM, AWS GuardDuty, AWS Security Hub, AWS Config, AWS CloudTrail, KMS, Macie, and Network Firewall.
• Functional technical competency and architectural understanding of security controls in Azure (Entra ID, Microsoft Defender for Cloud), GCP (Security Command Center, IAM), and OCI (Identity and Access Management, Cloud Guard).
• Strong proficiency in IaC tools (specifically Terraform or AWS CloudFormation) and a deep understanding of PaC frameworks (such as Open Policy Agent/Rego, AWS CloudFormation Guard, or HashiCorp Sentinel) to enforce compliance before deployment.
• Foundational understanding of cloud routing, VPC/VNet peering, CASB (Cloud Access Security Broker), Secure Web Gateway (SWG), and Zero Trust Network Access (ZTNA) concepts.

Preferred Capabilities And Qualifications

• SASE/SSE Experience: Direct, hands-on experience configuring, tuning, and deploying a SASE/SSE platform (CASB, SWG, DLP) across AWS, Azure, and GCP.
• Advanced IaC/PaC Implementation: Proven track record of building automated compliance pipelines that block non-compliant code and infrastructure from being merged into production.
• Cloud Security Architecture: Experience shifting organizations from reactive security monitoring to proactive cloud security posture management (CSPM) and continuous compliance.

Pay

Base Salary from $116,255.00 - $177,503.00/year. In addition to a competitive compensation, AEP offers a unique comprehensive benefits package that aims to support and enhance the overall well-being of our employees.

Schedule

The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.