Senior Cloud Security Engineer

About the job
We are seeking an experienced Senior Cloud Security Engineer to design, implement, and maintain secure, scalable, and resilient cloud infrastructure, primarily across AWS environments. The ideal candidate will possess strong expertise in cloud security architecture, DevSecOps, infrastructure automation, and security operations, with the ability to integrate security throughout the development lifecycle while ensuring compliance, operational efficiency, and business continuity.

Key Responsibilities

• Design, implement, and maintain secure, scalable, and highly available AWS cloud architectures.
• Lead DevSecOps initiatives by embedding security controls, vulnerability scanning, and compliance checks into CI/CD pipelines.
• Develop and maintain Infrastructure as Code (IaC) using Terraform, AWS CloudFormation, and Ansible.
• Build, optimize, and secure CI/CD pipelines using GitLab CI/CD, Jenkins, and GitOps practices.
• Implement and manage IAM, PAM, identity federation, and access governance solutions, including AWS IAM Identity Center and third-party identity providers.
• Integrate SIEM, SOAR, EDR, and Cloud Security Posture Management (CSPM) solutions to enhance threat detection, investigation, and automated remediation.
• Develop automated incident response and remediation workflows using AWS Lambda, Step Functions, and other cloud-native services.
• Implement cloud security controls and governance practices aligned with NIST, CIS Benchmarks, FedRAMP, and other applicable security standards.
• Secure containerized workloads and orchestration platforms, including Docker, Kubernetes, and Amazon EKS.
• Manage vulnerability assessment, remediation, endpoint protection, and cloud security posture using tools such as CrowdStrike, Qualys, and Wiz.
• Design and maintain secure cloud networking architectures, including VPCs, VPNs, Transit Gateway, and PrivateLink.
• Implement encryption, key management, secrets management, and data protection controls across cloud environments.
• Establish monitoring, logging, alerting, and observability solutions using Splunk, Prometheus, Grafana, and Datadog.
• Design and test disaster recovery and business continuity strategies, including multi-region resilience and high-availability configurations.
• Automate cloud operations and security processes using Python, Bash, and PowerShell.
• Conduct security assessments, risk analysis, compliance audits, and root cause investigations, ensuring timely remediation of identified issues.
• Collaborate with Security, DevOps, and Engineering teams to improve cloud security posture and operational reliability.
• Provide technical guidance and mentorship to junior engineers while promoting security best practices.

Required Skills & Qualifications

• Strong hands-on experience with AWS cloud services, including compute, storage, networking, IAM, and cloud security.
• Proven experience in DevSecOps, CI/CD automation, GitOps, and secure software delivery practices.
• Proficiency in Terraform, CloudFormation, and Ansible for infrastructure provisioning and configuration management.
• Experience with SIEM, SOAR, EDR, and CSPM technologies, preferably Splunk, CrowdStrike, Qualys, and Wiz.
• Strong understanding of IAM, PAM, identity federation, encryption, AWS KMS, secrets management, and network security.
• Hands-on experience securing Docker containers, Kubernetes clusters, and Amazon EKS environments.
• Strong scripting and automation skills using Python, Bash, and/or PowerShell.
• Experience with security monitoring, incident response, vulnerability management, and automated remediation.
• Knowledge of cloud compliance and security frameworks, including NIST, CIS, and FedRAMP.
• Understanding of high availability, disaster recovery, business continuity, and multi-region cloud architectures.
• Strong troubleshooting, analytical, communication, and cross-functional collaboration skills.

Preferred Qualifications

• AWS Certified Solutions Architect – Professional.
• AWS Certified Security – Specialty.
• Experience with Azure or multi-cloud security environments.
• Practical experience implementing FedRAMP, NIST, or CIS compliance controls.
• Exposure to AI/ML security, cloud workload protection, and emerging cloud security technologies.
• Experience leading cloud security initiatives and mentoring technical teams.