Cloud Security Engineer (AWS / Azure)

Compensation Contract rate commensurate with experience and engagement scope.

NEXT SUMMIT

Silpa Companies, LLC is a national IT consulting and staffing firm empowering organizations across multiple industries through a blend of AI adoption, Master Data Management, Data and Analytics, Cybersecurity, Cloud Engineering, DevSecOps/GitOps, Fractional C‑Suite leadership, Digital Transformation, and M&A advisory for private equity and software ventures. Silpa Companies is hiring a Cloud Security Engineer for client engagements that focus on AWS and Azure environments at scale. You will harden multi‑account AWS Organizations and Azure tenancies, build IAM and network‑control baselines, deploy and tune CSPM tooling, and partner with client engineering teams to integrate security into the delivery pipeline rather than bolt it on after the fact. This is a hands‑on engineering role; you will write Terraform, tune SCPs and Azure Policy, configure GuardDuty / Defender for Cloud, build break‑glass procedures, and triage real findings under client‑engagement pressure. Design and implement secure AWS multi‑account architectures using AWS Organizations, Control Tower, and Service Control Policies; equivalent on Azure using Management Groups, Azure Policy, and Defender for Cloud. Build and harden IAM at scale: AWS IAM Identity Center, Azure Entra ID conditional access, federation, role boundaries, and least‑privilege role design. Deploy and tune cloud‑native CSPM tooling (AWS Security Hub, Azure Defender for Cloud) and third‑party CSPM (Wiz, Prisma Cloud, Lacework) where in scope. Build network security baselines including VPC segmentation, AWS Network Firewall / Azure Firewall, private endpoints, and zero‑trust network access patterns. Implement workload identity and secrets management using AWS Secrets Manager, AWS Systems Manager Parameter Store, Azure Key Vault, or HashiCorp Vault. Harden container and Kubernetes workloads on EKS and AKS including image scanning, admission control, network policies, and runtime protection. Build incident‑ready logging and detection pipelines using CloudTrail, GuardDuty, Azure Activity Log, Microsoft Sentinel, or third‑party SIEM. Author runbooks and tabletop scenarios for cloud‑specific incidents (credential compromise, misconfigured S3 / blob, exposed metadata). Conduct architecture reviews and threat‑model client cloud designs before they hit production. Build and maintain Terraform / Bicep modules for the security baseline so client teams inherit hardened defaults rather than re‑derive them. Partner with client GRC teams to map cloud controls to SOC 2, ISO 27001, NIST 800‑53, and CIS Benchmarks. Mentor client engineers on secure‑by‑default cloud patterns and lift the bar on the engagement team. 4 or more years of hands‑on cloud security engineering on AWS, Azure, or both at production scale. Production experience with at least one IaC tool (Terraform required; Bicep, CloudFormation, or Pulumi a plus). Working knowledge of cloud‑native security services on AWS (GuardDuty, Security Hub, IAM, KMS, Secrets Manager) and Azure (Defender for Cloud, Entra ID, Key Vault, Sentinel). Hands‑on experience with at least one CSPM platform (Wiz, Prisma Cloud, Lacework, Orca, or the cloud‑native equivalents). Hands‑on container security experience on EKS or AKS including image scanning and admission control. Strong scripting skills in Python or PowerShell. Working knowledge of CIS Benchmarks for AWS, Azure, and Kubernetes. Comfort working in a consulting / multi‑client engagement context. Authorized to work in the U.S. Candidates located in the Houston, Texas area will be given preference; remote engineers will also be considered. Reliable, secure internet connection and ability to travel to client sites as required by engagement scope. Silpa Companies places Cloud Security Engineers on engagements where the cloud is real, the scale is non‑trivial, and the security work has executive attention. You will work across AWS and Azure environments, build security baselines that client engineering teams actually adopt, and grow a portfolio of hardened‑environment wins. Engineers who deliver consistently are prioritized for follow‑on and expanded scope work within the Silpa network. Complex multi‑cloud engagements across diverse industries Exposure to varied security toolchains and detection stacks Priority for follow‑on and expanded scope engagements based on quality of delivery Flexible contract and project‑based structure Collaborative delivery team with experienced Silpa engagement leads #J-18808-Ljbffr Silpa Consulting LLC