Cloud Identity Security

Cloud Identity Security Engineer Jobs

2 jobs found

Today

Cybersecurity Engineer

Kimley-Horn Warrenville, IL

Warrenville, IL

Today

Full time Ai Security Cloud Identity Security Cloud Platforms

Apply Now

Job Description

Kimley-Horn is seeking a Cybersecurity Engineer to support the Information Security team in strengthening the firm’s protection across cloud environments, identities, data, and AI technologies. This role emphasizes cloud security, identity and access, data protection, privileged access controls, and governance for AI and agentic AI capabilities.

Location and Work Mode

Location: Warrenville, IL
Work setup: Onsite (in-office position)

Role Focus

Secure cloud infrastructure by identifying risks and translating decisions into security outcomes
Drive Identity and Access Management (IAM) initiatives across authentication, authorization, and identity governance
Protect sensitive data using Data Loss Prevention (DLP) across cloud services, endpoints, collaboration platforms, and AI-enabled applications
Implement and manage Privileged Access Management (PAM) capabilities for privileged administrative and service identities
Establish security policies and governance for AI and agentic AI technologies, including authentication, authorization, monitoring, and lifecycle management

Key Responsibilities

Analyze cloud infrastructure to understand and communicate risks, concerns, and the outcomes of security decisions
Lead IAM initiatives, including authentication, authorization, privileged access management, conditional access, and identity governance
Develop and maintain DLP controls to protect sensitive business data across cloud services, endpoints, collaboration platforms, and AI-enabled applications
Design, implement, and operate PAM solutions, including privileged account lifecycle management, just-in-time access, credential protection, session monitoring, and privileged access governance
Define security policies and governance for AI and agentic AI technologies that require authentication, authorization, monitoring, and lifecycle management
Track cloud application vulnerabilities using security tooling and coordinate with development teams to plan remediation
Conduct threat modeling, security assessments, and architecture reviews for cloud services, AI applications, and new technology deployments
Partner with IT, infrastructure, and application teams to integrate security controls into cloud platforms, identity services, and AI-powered business solutions
Participate in tabletop exercises and simulations to test and improve incident response plans
Support compliance, audit, and risk management by documenting security controls, procedures, and technical standards

Required Qualifications

Education: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field
Experience: 5+ years in Cloud Security, Identity and Access Management, Information Security, or a similar enterprise-level role
Certifications: Professional certifications such as Security+, Cloud+, AZ-300, AZ-500, CCSP, CISSP, or other relevant security certifications
Experience designing, implementing, and supporting security controls in Microsoft Azure, AWS, or other enterprise cloud environments
Hands-on experience with IAM technologies including authentication, authorization, single sign-on (SSO), federation, identity governance, and conditional access
Experience administering or supporting PAM solutions, including privileged account governance, just-in-time access, credential vaulting, and privileged session management
Experience implementing and managing DLP, information protection, and data governance controls across cloud services, endpoints, and collaboration platforms
Knowledge of AI and agentic AI security concepts, including governance, identity lifecycle management, authorization models, and monitoring of AI agents
Knowledge of security frameworks and standards such as NIST CSF, CIS Controls, ISO 27001, and Zero Trust Architecture
Strong analytical, troubleshooting, and problem-solving skills
Experience with change-management policies and procedures
Strong communication skills in writing and verbally, with the ability to convey complex technical concepts to non-technical stakeholders

Technologies and Tools

Microsoft Azure, AWS
Microsoft Entra ID
PIM, Identity Governance, Conditional Access
Microsoft Purview DLP and Information Protection
CyberArk, OneIdentity, Delinea
Security+, Cloud+, AZ-300, AZ-500, CCSP, CISSP
NIST CSF, CIS Controls, ISO 27001
Zero Trust Architecture

Preferred Skills

Microsoft Entra ID, PIM, Identity Governance, and Conditional Access
Microsoft Purview DLP and Information Protection
CyberArk, OneIdentity, Delinea, or similar PAM platforms
Security automation and orchestration experience
AI and agentic AI security governance
Experience managing machine identities, service accounts, and workload identities
Threat modeling and cloud security architecture review experience

Benefits

Exceptional Retirement Plan: 2-to-1 company match on up to 4% of eligible compensation (salary + bonus) plus additional profit-sharing contribution
Comprehensive Health Coverage: Low-cost medical, dental, and vision insurance options
Time Off: Personal leave, flexible scheduling, floating holidays, and half-day Fridays
Financial Wellness: Student loan matching in the 401(k) and performance-based bonuses
Professional Development: Tuition reimbursement and extensive internal training programs
Family-Friendly Benefits: New Parent Leave, family building benefits, and childcare resources

View full job page →

1d ago

Cloud Security Engineer

Bank OZK Little Rock, AR

Little Rock, AR

1d ago

Full time Cloud Identity Security Cloud Platforms Cloud Security

Apply Now

Job Description

Join Bank OZK to help secure cloud environments for a regulated financial institution through controls, compliance, and incident response.

Responsibilities

Support onboarding and risk assessment of new Cloud Service Providers (CSPs) through the Third-Party Risk Management (TPRM) process.
Assess CSP security controls against the Bank OZK Cloud Security Standard and regulatory requirements to ensure proposed cloud solutions meet legal and compliance criteria prior to approval.
Implement and maintain cloud security controls across SaaS, PaaS, and IaaS, using Bank-approved secure configuration baselines (including benchmarks such as CIS) for resources like VMs, containers, and storage.
Enforce secure-by-default settings during deployments.
Partner with OZK Technology teams to design end-to-end cloud architectures incorporating network segmentation, encryption, and other security best practices.
Integrate cloud platforms and applications with the Bank’s centralized Single Sign-On (SSO) and identity management systems.
Ensure cloud activity logs are enabled, collected, and integrated with SIEM and monitoring systems (Bank OZK Security Information and Event Management).
Develop detection mechanisms or alert rules to monitor cloud events for compromise indicators or policy violations.
Investigate and respond to cloud security incidents in coordination with the Security Operations Center (SOC), supporting remediation and lessons learned.
Manage security compliance and misconfiguration risk using Cloud Security Posture Management (CSPM) tools or scripts.
Perform configuration audits and vulnerability scans of cloud assets; coordinate with infrastructure and application teams to remediate weaknesses or document risk acceptances per Bank vulnerability management standards.
Work with software development teams and Application Security Engineers to deploy cloud-native applications securely, including threat modeling and secure SDLC practices aligned with Bank standards.
Implement cloud-native application security controls, including WAFs for internet-facing apps and enforce proper restrictions for sensitive data stores (e.g., security groups and private endpoints).
Embed security into CI/CD and Infrastructure-as-Code (IaC) workflows; implement automated security checks for templates and application code (e.g., IaC scanning, container image scanning, secret leakage detection).
Advise on secure configuration of CI/CD tooling and use of secure secret management for pipeline credentials, promoting DevSecOps practices.
Provide guidance and training to IT cloud engineers, developers, and business units on cloud security requirements and secure cloud service usage.
Maintain documentation for cloud security controls and processes to support audits or examinations.
Provide evidence of compliance with the Bank’s Cloud Security Standard and applicable regulations during internal, external, or regulatory audits; drive corrective actions and process improvements based on findings.
Stay current with regulatory guidance, including FFIEC cloud computing guidance and NYDFS cybersecurity requirements.
Keep pace with evolving cloud security threats, tools, and best practices for financial institutions.
Recommend and implement enhancements to Bank OZK’s cloud security posture.
Perform additional tasks and support other team members as needed.

Requirements

Bachelor’s degree in Information Systems or related field (or commensurate work experience), required.
3+ years of work experience in a regulated financial institution or other heavily regulated environment, required.
Familiarity with banking-specific security considerations and third-party risk management practices for cloud services, required.
Knowledge of integrating security testing tools into build/deployment pipelines and managing secrets for automation.
Ability to work with DevOps/CI-CD pipelines and use Infrastructure-as-Code (e.g., Terraform, CloudFormation) securely.
Advanced security mindset to assess risk in cloud architectures.
Ability to apply confidentiality, integrity, and availability principles when evaluating cloud solutions and making risk-based decisions aligned with the Bank’s risk appetite.
Strong diligence configuring and reviewing cloud settings, logs, and processes; follow through until issues are fully resolved and verified.
Strong critical thinking to analyze complex technical problems or security events in cloud environments.
Ability to break down problems, identify patterns or root causes, and develop mitigations.
Ability to communicate cloud security issues in terms of business impact.
Excellent interpersonal skills for cross-functional collaboration and influencing secure outcomes without formal authority.
Ability to operate in a fast-paced, evolving environment and update strategies for new cloud services, threats, and regulatory requirements.
Self-motivated and proactive; takes ownership and drives improvements; demonstrates strong responsibility and ethics when handling sensitive systems and data.
Demonstrated initiative to accomplish work objectives.
Professional security certifications related to cloud and information security (e.g., CCSP, CISSP, AWS/Azure Security Engineer, or CompTIA Security+), preferred.

Technologies

CIS
SaaS, PaaS, IaaS
Single Sign-On (SSO)
SIEM
Cloud Security Posture Management (CSPM)
CSPs
TPRM
WAF
Security groups, private endpoints
CI/CD
Infrastructure-as-Code (IaC)
Terraform, CloudFormation
DevOps
CCSP, CISSP, AWS, Azure, CompTIA Security+
FFIEC cloud computing guidance
NYDFS cybersecurity requirements

Benefits

Generous PTO
401(k) matching
Health, dental, vision (and pet!) insurance
Special perks and discounts

Job Purpose & Scope

Ensure the secure design, implementation, and operation of Bank OZK cloud environments.
Partner with IT, Labs, Data, Third-Party Risk Management, and application owners to implement cloud security controls and enforce compliance with Bank policies and industry regulations.

Job Expectations

Operate customary equipment and technology used in a business environment, with or without accommodation.
Note: description is not exhaustive; other job functions, duties, skills, and standards may be added, and management may change requirements at any time.

View full job page →

Cloud Identity Security Engineer Jobs

Cybersecurity Engineer

Cloud Security Engineer

Get Cloud Identity Security Engineer Jobs alerts