Cloud Security Engineer - Advanced

• Partner with internal teams to incorporate security requirements into cloud architecture, modernization, application onboarding, access enablement, and vendor integration efforts.

• Provide security architecture review and design recommendations for public cloud platforms, internet-facing applications, APIs, workloads, and data flows to improve control consistency and reduce unmanaged exposure.

• Assess cloud designs against enterprise security standards, regulatory expectations, and industry frameworks; document architecture findings, risk decisions, exception rationale, and recommended remediation options.

• Advise on standardized perimeter controls, Zero Trust access patterns, private access, segmentation, secure connectivity, and identity-based access approaches for users, workloads, applications, and third parties.

• Review cloud configuration, IAM, network routing, encryption, logging, monitoring, and telemetry requirements; identify gaps and coordinate practical next steps with accountable technology owners.

• Support adoption and consistent use of cloud-native and enterprise security capabilities, including CNAPP, CSPM, CWPP, CIEM, KSPM, WAF, IDS/IPS, secure web gateway, SASE, and ZTNA capabilities where applicable.

• Articulate cloud security risk, business impact, control tradeoffs, and remediation priorities to technical teams, management stakeholders, and security leadership.

• Maintain reusable cloud security guidance, decision records, control recommendations, status updates, escalation points, and next steps for cross-functional delivery teams.

• Contribute to Security Architecture objectives by strengthening secure-by-design delivery, improving cloud control maturity, and enabling consistent architecture governance across cloud platforms.

Minimum Qualifications

• Bachelor’s degree in Information Security, Computer Science, Engineering, Information Systems, or equivalent experience.

• 5+ years of experience in information security, cloud engineering, cloud security architecture, network security, or infrastructure security.

• Direct experience partnering with Cloud Engineering, Network, Identity, Security Operations, and application teams to assess risk and recommend secure design patterns.

• Strong understanding of public cloud security concepts across AWS, Azure, GCP, and other cloud platforms.

• Experience evaluating cloud architecture designs, identifying security gaps, articulating risk, and recommending practical controls that can be implemented by accountable engineering and operations teams.

Preferred Qualifications

• Advanced degree preferred.

• Cloud security, architecture, or engineering certifications such as CCSP, CISSP, AWS Security Specialty, Azure Security Engineer, Google Professional Cloud Security Engineer, or equivalent preferred.

• Knowledge of Zero Trust, SASE, ZTNA, secure web gateway, DNS security, cloud firewall, WAF, IDS/IPS, segmentation, and private access patterns for users, workloads, APIs, and internet-facing applications.

• Familiarity with CNAPP, CSPM, CWPP, CIEM, KSPM, cloud-native security services, infrastructure-as-code scanning, and policy-as-code approaches used to detect, prioritize, and reduce cloud exposure.

• Working knowledge of secure SDLC, DevSecOps, CI/CD pipelines, Terraform or similar infrastructure-as-code tooling, container and Kubernetes security, API security, and secure configuration baselines.

Key Skills and Competencies

• Knowledge of cloud identity and access management, including least privilege, privileged access, workload identities, service accounts, federated access, conditional access, and non-human identity risk.

• Ability to interpret cloud security findings, misconfigurations, exposure paths, vulnerability data, and telemetry; distinguish material risk from noise; and communicate prioritized remediation options.

• Ability to apply enterprise security policies, audit expectations, and frameworks such as NIST, CIS, CSA CCM, and OWASP to cloud architecture reviews, standards, guidance, and exception recommendations.

• Strong communication, coordination, analytical, facilitation, and project management skills.

• Proven ability to influence teams without direct authority and drive clarity on ownership, risk acceptance, remediation plans, and next steps.

• Demonstrated ability to operate effectively in a fast-paced, globally distributed environment with limited dedicated staffing, competing priorities, and shared internal responsibility.