Senior Cloud Security Engineer

Job Details:

================

Job Description:

--------------------

Position Overview

The Senior Cloud Security Engineer is a hands-on technical lead responsible for designing, implementing, and improving security across the organization’s Microsoft Azure and Amazon Web Services (AWS) environments. This role partners with cloud platform, infrastructure, application, identity, and security operations teams to build secure cloud foundations, protect workloads and data, and make security controls repeatable through automation.

The ideal candidate combines deep practical knowledge of Azure and AWS security services with strong skills in cloud architecture, identity and access management, network security, detection and response, and infrastructure as code. Experience with Oracle Cloud Infrastructure (OCI) is a plus.

Key Responsibilities

Cloud Security Architecture and Engineering

·        Design and implement secure architectures for Azure and AWS environments, including landing zones, accounts and subscriptions, networking, shared services, and workload environments.

·        Establish cloud security reference architectures, patterns, guardrails, and configuration standards that support secure, reliable, and scalable services.

·        Review cloud designs and changes for security risks, recommending pragmatic mitigations that fit business and operational needs.

·        Apply defense-in-depth principles across cloud identity, network, compute, storage, data, application, and management planes.

·        Help teams adopt secure cloud-native services and architecture patterns while minimizing unnecessary complexity and operational friction.

Identity and Access Management

·        Design and improve cloud identity and access controls, including least-privilege roles, federation, privileged access, service identities, and workload authentication.

·        Strengthen identity lifecycle, access review, and administrative access practices across Microsoft Entra ID, Azure, AWS IAM, and related identity providers.

·        Reduce reliance on long-lived credentials through managed identities, workload identity federation, role assumption, and secure secrets management.

·        Review policies and permissions for excessive privilege, unintended trust relationships, and cross-account or cross-tenant access risks.

·        Partner with identity teams to improve conditional access, multifactor authentication, privileged access management, and identity threat monitoring.

Cloud Platform and Workload Security

·        Secure cloud infrastructure and workloads, including virtual machines, containers, Kubernetes, serverless services, storage, databases, and managed platform services.

·        Establish and maintain secure baseline configurations, configuration policies, and preventive controls for Azure and AWS.

·        Implement cloud network security controls such as segmentation, routing safeguards, firewalls, private connectivity, egress controls, and protection of public-facing services.

·        Improve encryption and key management practices for data at rest and in transit, including certificate management and key lifecycle controls.

·        Hel...

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis.