Cloud Security Engineer

hackajob is collaborating with Leo Technologies to connect them with exceptional professionals for this role.

Cloud Security Engineer
Palm Beach

Description

Role

A Cloud Security Engineer safeguards cloud infrastructure by building automated security controls, hardening cloud services, and ensuring compliance with regulatory and organizational standards. They serve as the technical backbone of cloud security—designing IAM architectures, building detection pipelines, and implementing policy-as-code to enforce secure configurations at scale.

Key Responsibilities

Identity & Access Management (IAM)

· Design and implement IAM architecture including permission boundaries, service control policies, and privileged access management.

Infrastructure-as-Code & Automation

· Build security baselines and guardrails using Terraform, Pulumi, or CloudFormation.

· Automate compliance checks using AWS Config, Azure Policy, or OPA.

Cloud Monitoring & Detection

· Develop and maintain cloud detection pipelines that ingest and enrich cloud API events.

· Implement monitoring and incident response procedures for cloud environments.

Cloud Hardening & Data Security

· Harden Kubernetes and container environments (image scanning, network policies, runtime protection).

· Implement encryption, key management, and secure storage configurations.

Security Reviews & Incident Response

· Conduct architecture reviews and provide actionable security requirements.

· Support incident response by building containment automation and long-term preventive controls.

Compliance & Governance

· Ensure alignment with frameworks such as NIST RMF, FedRAMP, SOC2 Type 2, CJIS, CMMC, GDPR, HIPAA, and PCI-DSS depending on industry.

Requirements

What we Value

· Bachelor’s degree in Computer Science, IT, Cybersecurity, or equivalent experience.

· 4–8 years of experience in cloud security or cloud engineering.

· Hands-on experience with AWS, Azure, or GCP security services.

· Certifications such as AWS Security Specialty, Azure Security Engineer (AZ-500), CCSP, or CKS are highly desirable.

· Strong understanding of IAM, encryption, network security, and cloud service models (IaaS/PaaS/SaaS).

· Proficiency with Terraform, Python, Kubernetes security, and CSPM tools.