Cloud Security Engineer

Glocomms is partnered with a leading proprietary trading firm seeking a Cloud Security Engineer to help secure and scale a highly available, performance-driven cloud infrastructure environment. This individual will play a critical role in strengthening the firm's cloud security posture across AWS and multi-cloud platforms, partnering closely with infrastructure, platform, development, and security teams to embed security throughout the design, deployment, and operation of cloud-native technologies. The ideal candidate brings deep expertise in cloud security architecture, Kubernetes security, automation, and modern security engineering practices, with a strong ability to balance risk reduction with business and technology objectives in a fast-paced trading environment. Primary Responsibilities Design, implement, and enhance cloud security controls across AWS and hybrid/multi-cloud environments to reduce risk and improve overall security posture. Conduct cloud architecture and security reviews, providing guidance on secure infrastructure design, cloud migrations, and application deployments. Secure Kubernetes platforms and containerized workloads through RBAC, workload identity, network policies, secrets management, runtime protection, and admission controls. Build and maintain Infrastructure as Code and Policy as Code frameworks using tools such as Terraform and CloudFormation to automate security guardrails and governance. Lead vulnerability management activities, including security assessments, remediation planning, configuration reviews, and continuous security monitoring. Support security operations and incident response efforts, including threat analysis, root cause investigations, troubleshooting, and production security events. Key Qualifications 5+ years of experience in cloud security engineering, cloud infrastructure security, security architecture, or related cybersecurity roles. Strong hands-on experience securing AWS environments, with exposure to Azure, GCP, or other cloud platforms preferred. Deep knowledge of Kubernetes, container security, cloud-native technologies, networking, and secure platform engineering practices. Experience implementing IAM, least-privilege access controls, privileged access management, encryption strategies, KMS, HSMs, and secrets management solutions. Proficiency with Terraform, CloudFormation, Infrastructure as Code, security automation, and policy enforcement frameworks. Programming or scripting experience with Python, Go, JavaScript, or similar languages, along with excellent communication and cross-functional collaboration skills. This position is based in Chicago and offers the opportunity to join a premier proprietary trading firm where technology and security are critical competitive advantages. The firm strongly prefers a hybrid schedule with three days per week onsite in their downtown Chicago HQ.