Cloud Security Engineer

Responsibilities

• Harden and protect cloud resources across Azure, AWS, and GCP
• Perform security assessments, threat modeling, and internal cloud audits
• Continuously monitor and improve cloud security posture using Defender for Cloud and CSPM tools
• Establish and enforce IAM controls including RBAC, least privilege, and conditional access
• Embed security checks into CI/CD pipelines as part of DevSecOps
• Design and maintain secure infrastructure with Terraform
• Automate security tasks through scripting and infrastructure as code
• Contribute to CMMC and NIST SP 800-171 compliance through control implementation and evidence collection
• Support logging, monitoring, and detection integration (SIEM/XDR)
• Collaborate with cross-functional teams to remediate security issues and strengthen the security posture

Requirements

• At least four years of experience in cloud, security, DevOps, or infrastructure roles
• Hands-on experience with at least one cloud provider, with Azure preferred
• Proficiency with Terraform or similar infrastructure as code tools
• Familiarity with securing CI/CD pipelines
• Strong understanding of IAM, secrets management, and security best practices
• Working knowledge of CMMC, NIST SP 800-171, or similar frameworks

Technologies

• Azure Government
• AWS GovCloud
• Google Cloud Platform (GCP)
• Microsoft Defender for Cloud
• Microsoft Sentinel
• Terraform
• Python
• PowerShell
• Bash
• CSPM platforms
• SIEM
• XDR
• Kubernetes

Benefits

• Stock options (long-term incentives)
• Medical, vision, and dental coverage
• 401(k) retirement plan

Additional Information

Base pay ranges are defined by role, seniority, location, and market alignment, with offers determined on a case‑by‑case basis based on skills, education, experience, and internal equity. In addition to base salary, full-time hires may be eligible for long‑term incentives in the form of stock options, along with medical, vision, and dental coverage and a 401(k) retirement plan.