Cloud Security Engineer - Advanced

• Partner with internal teams to incorporate security requirements into cloud architecture, modernization, application onboarding, access enablement, and vendor integration efforts. 

• Provide security architecture review and design recommendations for public cloud platforms, internet-facing applications, APIs, workloads, and data flows to improve control consistency and reduce unmanaged exposure. 

• Assess cloud designs against enterprise security standards, regulatory expectations, and industry frameworks; document architecture findings, risk decisions, exception rationale, and recommended remediation options. 

• Advise on standardized perimeter controls, Zero Trust access patterns, private access, segmentation, secure connectivity, and identity-based access approaches for users, workloads, applications, and third parties. 

• Review cloud configuration, IAM, network routing, encryption, logging, monitoring, and telemetry requirements; identify gaps and coordinate practical next steps with accountable technology owners. 

• Support adoption and consistent use of cloud-native and enterprise security capabilities, including CNAPP, CSPM, CWPP, CIEM, KSPM, WAF, IDS/IPS, secure web gateway, SASE, and ZTNA capabilities where applicable. 

• Articulate cloud security risk, business impact, control tradeoffs, and remediation priorities to technical teams, management stakeholders, and security leadership. 

• Maintain reusable cloud security guidance, decision records, control recommendations, status updates, escalation points, and next steps for cross-functional delivery teams. 

• Contribute to Security Architecture objectives by strengthening secure-by-design delivery, improving cloud control maturity, and enabling consistent architecture governance across cloud platforms. 

Minimum Qualifications 

• Bachelor’s degree in Information Security, Computer Science, Engineering, Information Systems, or equivalent experience. 

• 8+ years of experience in information security, cloud engineering, cloud security architecture, network security, or infrastructure security. 

• Direct experience partnering with Cloud Engineering, Network, Identity, Security Operations, and application teams to assess risk and recommend secure design patterns. 

• Strong understanding of public cloud security concepts across AWS, Azure, GCP, and other cloud platforms. 

• Experience evaluating cloud architecture designs, identifying security gaps, articulating risk, and recommending practical controls that can be implemented by accountable engineering and operations teams. 

Preferred Qualifications 

• Advanced degree preferred. 

• Cloud security, architecture, or engineering certifications such as CCSP, CISSP, AWS Security Specialty, Azure Security Engineer, Google Professional Cloud Security Engineer, or equivalent preferred. 

• Knowledge of Zero Trust, SASE, ZTNA, secure web gateway, DNS security, cloud firewall, WAF, IDS/IPS, segmentation, and private access patterns for users, workloads, APIs, and internet-facing applications. 

• Familiarity with CNAPP, CSPM, CWPP, CIEM, KSPM, cloud-native security services, infrastructure-as-code scanning, and policy-as-code approaches used to detect, prioritize, and reduce cloud exposure. 

• Working knowledge of secure SDLC, DevSecOps, CI/CD pipelines, Terraform or similar infrastructure-as-code tooling, container and Kubernetes security, API security, and secure configuration baselines. 

Key Skills and Competencies 

• Knowledge of cloud identity and access management, including least privilege, privileged access, workload identities, service accounts, federated access, conditional access, and non-human identity risk. 

• Ability to interpret cloud security findings, misconfigurations, exposure paths, vulnerability data, and telemetry; distinguish material risk from noise; and communicate prioritized remediation options. 

• Ability to apply enterprise security policies, audit expectations, and frameworks such as NIST, CIS, CSA CCM, and OWASP to cloud architecture reviews, standards, guidance, and exception recommendations. 

• Strong communication, coordination, analytical, facilitation, and project management skills. 

• Proven ability to influence teams without direct authority and drive clarity on ownership, risk acceptance, remediation plans, and next steps. 

• Demonstrated ability to operate effectively in a fast-paced, globally distributed environment with limited dedicated staffing, competing priorities, and shared internal responsibility.