Cloud Security Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr Cloud Security Engineer I based in the United States.

This role is responsible for strengthening cloud security across enterprise environments while ensuring alignment with security policies, regulatory requirements, and industry best practices.

• Partner with cloud and technology teams to architect, implement, and maintain secure cloud solutions across enterprise environments.
• Implement, monitor, and support cloud security technologies that help maintain compliance with HITRUST, the CSA Cloud Controls Matrix, and other applicable standards.
• Deploy and maintain security controls and detection technologies, including Cloud Security Posture Management (CSPM), Cloud Workload Protection (CWP), cloud access security capabilities, next-generation firewalls, container security, and automated compliance tools.
• Evaluate existing and emerging security applications and tools, recommend improvements, and support their integration with current technology environments.
• Establish and maintain security standards across network, infrastructure, system, application, and cloud implementations.
• Design and implement security controls for Microsoft Azure IaaS and PaaS environments, with consideration for AWS and SaaS platforms where applicable.
• Identify security risks and recommend improvements to policies, procedures, configurations, and controls to mitigate vulnerabilities and compliance gaps.
• Work with business units and technical stakeholders to strengthen security policies, procedures, governance, and operational practices.
• Develop and maintain cloud security documentation, standards, policies, procedures, and governance models.
• Partner with system engineering and DevOps teams to assess, prioritize, and reduce cloud security risks.
• Conduct hardening reviews and assessments with developers, operations, infrastructure, and engineering teams.
• Support cloud security monitoring, logging, auditing, anomaly detection, and cybersecurity risk management activities.
• Contribute to cloud security strategy and establish appropriate security guardrails for emerging technologies, including artificial intelligence cloud architectures.
• Stay current with cybersecurity threats, risk intelligence, governance requirements, cloud security trends, and evolving industry practices.

• Bachelor’s degree in a relevant discipline or equivalent professional experience; a high school diploma is required when qualifying through equivalent experience.
• At least 5 years of experience working with enterprise cloud environments, including IaaS, PaaS, and SaaS; professional cloud security experience is strongly preferred.
• Strong hands-on experience with Microsoft Azure cloud architecture and security, with additional experience securing AWS environments highly valuable.
• Experience with CSPM and CWP technologies such as Microsoft Defender for Cloud, AWS Security Hub, or AWS Config.
• In-depth knowledge of Azure Policy and/or AWS Service Control Policies.
• Experience with Infrastructure as Code technologies such as Terraform or Azure Bicep is preferred.
• Strong understanding of cloud networking concepts, including routing, traffic filtering, firewalls, load balancing, and related security controls.
• Experience securing cloud-hosted containers and working with DevOps and CI/CD tooling.
• Demonstrated experience hardening AWS and/or Azure services and implementing cloud security controls.
• Knowledge of the CSA Cloud Controls Matrix and CIS Benchmarks for cloud environments.
• Strong understanding of host hardening, auditing, logging, monitoring, network security, anomaly detection, cybersecurity risk, threat intelligence, and governance.
• Ability to translate business and technical requirements into secure, scalable, and reliable cloud solutions.
• Strong critical-thinking, analytical, problem-solving, and decision-making skills.
• Excellent communication and stakeholder-management abilities, with the capacity to build cooperative relationships across technical and business teams.
• Strong organizational and time-management skills, with the ability to prioritize, multitask, and maintain accuracy in a changing environment.
• Ability to handle confidential information with discretion and professionalism.
• Relevant certifications are preferred, including CCSP, AWS Certified Developer, CSA certifications, or Microsoft Azure Solutions Architect credentials.

• Annual full-time salary range of $146,232–$180,000 USD, depending on qualifications, education, experience, skills, and internal equity.
• Fully remote work arrangement.
• Remote onboarding and training.
• Company-provided technology equipment for the work-from-home environment.
• Opportunity to work on enterprise cloud security architecture, governance, compliance, and risk reduction initiatives.
• Exposure to Azure, AWS, cloud-native security, DevOps, container security, Infrastructure as Code, and emerging AI cloud architectures.
• Collaborative environment with cross-functional inter