Cloud Security Engineer

Role & responsibilities

• Design, implement, and maintain secure cloud environments across AWS, Microsoft Azure, and Google Cloud Platform.
• Develop and enforce cloud security architecture, policies, standards, and governance frameworks.
• Perform cloud security assessments, risk analysis, threat modeling, and architecture reviews for cloud workloads.
• Implement security controls for cloud infrastructure, applications, networks, identities, and data protection.
• Manage cloud identity and access management (IAM), privileged access management (PAM), role-based access control (RBAC), and authentication mechanisms.
• Design and implement Zero Trust security principles across cloud platforms.
• Secure cloud networking components including VPC/VNet, security groups, firewalls, VPN, private endpoints, WAF, and network segmentation.
• Implement and manage cloud security tools including CSPM, CWPP, SIEM, SOAR, vulnerability scanners, and security monitoring platforms.
• Monitor cloud environments for security threats, misconfigurations, vulnerabilities, and compliance risks.
• Support incident response, threat investigation, containment, remediation, and root cause analysis for cloud security incidents.
• Implement DevSecOps practices by integrating security controls into CI/CD pipelines and software development workflows.
• Secure Infrastructure as Code (IaC) deployments using Terraform, CloudFormation, ARM Templates, and security automation practices.
• Perform security reviews for Kubernetes, containers, APIs, serverless applications, and cloud-native workloads.
• Manage encryption, key management, secrets management, and data protection solutions.
• Ensure compliance with security frameworks including ISO 27001, NIST, CIS Benchmarks, PCI DSS, and GDPR.
• Collaborate with cloud engineers, DevOps teams, security operations, application teams, and business stakeholders.
• Create security documentation including cloud security standards, architecture diagrams, procedures, and incident response playbooks.
• Evaluate emerging cloud security technologies and recommend improvements to strengthen security posture.

Preferred candidate profile

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Information Security, or a related technical discipline.
• 5 to 10 years of experience in Cloud Security, Cybersecurity Engineering, Cloud Infrastructure Security, or Information Security roles.
• Strong hands-on experience securing AWS, Microsoft Azure, and/or Google Cloud Platform environments.
• Proven experience designing and implementing cloud security architectures, controls, governance models, and security best practices.
• Strong knowledge of IAM, PAM, RBAC, MFA, SSO, Zero Trust Architecture, encryption, PKI, and secrets management.
• Experience securing cloud networking components including VPC/VNet, VPN, firewalls, security groups, WAF, load balancers, and private connectivity.
• Hands-on experience with CSPM, CWPP, SIEM, SOAR, EDR, vulnerability management, and cloud monitoring tools.
• Strong experience with cloud security solutions such as AWS IAM, AWS KMS, Azure Entra ID, Azure Key Vault, Microsoft Defender for Cloud, and Cloud Security tools.
• Experience with DevSecOps, CI/CD security, Infrastructure as Code (Terraform, CloudFormation, ARM Templates), and security automation.
• Knowledge of Kubernetes security, Docker security, container security, serverless security, and API security.
• Experience with threat modeling, vulnerability assessment, penetration testing, incident response, and security investigations.
• Strong understanding of cybersecurity frameworks including NIST CSF, ISO 27001, CIS Benchmarks, PCI DSS, and GDPR.
• Scripting and automation experience using Python, PowerShell, or Bash is preferred.
• Strong analytical, problem-solving, communication, and stakeholder management skills.
• Experience working with enterprise cloud environments, security audits, and cross-functional teams.

Preferred certifications

• CCSP (Certified Cloud Security Professional)
• CISSP
• CISM
• AWS Certified Security Specialty
• AWS Certified Solutions Architect Professional
• Microsoft Certified: Cybersecurity Architect Expert
• Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• Certified Kubernetes Security Specialist (CKS)
• Terraform Associate
• ISO 27001 Lead Auditor / Lead Implementer