Senior Cloud Governance Engineer

Responsibilities

Kforce has a client in Charlotte, NC that is seeking a Senior Cloud Governance Engineer.Key Responsibilities:

• Compliance & Audit Readiness: Own the end-to-end compliance lifecycle for cloud

infrastructure; Ensure environments are continuously aligned with organizational policies,regulatory frameworks (SOC 2, ISO 27001, NIST, CIS Benchmarks), and internal standards

• Policy-as-Code: Translate compliance requirements into enforceable Azure Policy definitions,

Terraform validation rules, and automated guardrails that prevent non-compliant resources frombeing deployed

• Evidence Collection & Automation: Design and implement automated workflows for collecting,
• rganizing, and presenting audit evidence; Reduce manual effort during audit cycles by building

repeatable, auditable processes

• Terraform Pattern Governance: Review and provide guidance on infrastructure-as-code

patterns to ensure they meet compliance, security, and operational standards; Propose requiredupdates to existing Terraform modules when standards evolve

• Security Posture Management: Operate and optimize cloud security posture management

(CSPM) tooling, primarily Wiz, to identify misconfigurations, prioritize risk, and drive remediationwith engineering teams

• Monitoring & Reporting: Build and maintain compliance dashboards and workbooks using

Azure Monitor and Azure Workbooks to provide real-time visibility into governance postureacross subscriptions and environments

• AI-Powered Governance Tooling: Design and build AI/LLM-driven tools that accelerate

governance workflows - such as automated control mapping, natural-language policyinterpretation, intelligent evidence summarization, and anomaly detection across compliancedata

• GRC Program Support: Maintain and operate governance, risk, and compliance (GRC)

processes - including risk register management, control testing schedules, exception tracking,and remediation SLA monitoring

Skills

• GRC Fundamentals: Strong grounding in governance, risk, and compliance, including control

mapping, risk assessment, exception management, and remediation SLA tracking

• IT Audit Experience: Hands-on experience with internal and external IT audits: scoping controls,

assembling evidence, answering auditor questions, and driving findings to closure

• Compliance Frameworks: Working knowledge of SOC 2, ISO 27001, NIST 800-53, and CIS

Benchmarks, and the ability to read an internal standard and tell which technical requirement acontrol actually imposes

• Azure Governance: Solid understanding of Azure Policy, management groups and policy

inheritance, Microsoft Defender for Cloud, and Azure Monitor

• CSPM Tools (Wiz): Experience using Wiz or a comparable CSPM platform (Prisma Cloud, Orca) to investigate findings, judge their accuracy, and know where the tool's coverage stops
• Infrastructure as Code Literacy: Able to read Terraform well enough to understand what a

remediation changes and to write good acceptance criteria

• AI-Assisted Workflows: Comfortable using AI-assisted tools and command-line workflows,

working in Git, and critically checking AI-generated output before relying on it

• Prioritization & Program Management: A record of running a backlog across several teams,

making risk-based tradeoffs, and keeping work moving without direct authority

• Communication & Influence: Able to turn technical findings into clear remediation guidance for

engineers, precise questions for compliance, and a concise posture summary for leadership and auditors

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.


We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.


Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.


This job is not eligible for bonuses, incentives or commissions.


Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.


By clicking "Apply Today" you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.
Kforce is a professional staffing services firm offering Technology and Finance & Accounting jobs with top employers nationwide. We specialize in providing contract, contract-to-hire and direct placement opportunities, with over 50 years of experience in the staffing industry. Kforce offers many consultants comprehensive benefits depending on employment status, including medical, dental, 401(K), life insurance and disability. Our vision is to be "the firm most respected by those we serve."