Senior Cloud Security Engineer

Senior Cloud Security EngineerPosition Summary

Cream City Cyber is seeking a highly skilled Senior Cloud Security Engineer to serve as a key technical resource supporting cloud security initiatives and customer engagements. This role requires advanced expertise in securing Microsoft Azure and Microsoft 365 environments, with significant experience supporting hybrid infrastructures that include both cloud and on-premises technologies.

The Senior Cloud Security Engineer will help define and execute security strategies for customer engagements, design secure cloud and hybrid architectures, identify and reduce cybersecurity risk, and provide technical guidance throughout implementation and transformation initiatives.

This position requires a strong combination of hands-on technical expertise, security architecture experience, customer-facing communication skills, and the ability to translate business and security requirements into practical technical solutions.

Key Responsibilities

Cloud Security Strategy & Technical Leadership

• Develop and execute cloud security strategies aligned with customer business objectives, risk profiles, and technology environments.
• Serve as a senior technical resource and escalation point for complex cloud and hybrid security matters.
• Provide technical guidance and mentorship to cloud security engineers, analysts, and other project resources.
• Serve as a trusted technical advisor to customers throughout security assessments, implementations, and transformation initiatives.
• Help define technical approaches, priorities, and roadmaps for customer engagements.

Cloud Security Architecture & Governance

• Design, assess, and support the implementation of secure architectures for Microsoft Azure and Microsoft 365 environments.
• Establish, assess, and implement security policies, standards, configurations, and best practices across cloud platforms.
• Evaluate customer cloud environments to identify security gaps, vulnerabilities, configuration weaknesses, and opportunities for improvement.
• Develop practical remediation strategies that balance security, business requirements, operational needs, and technical feasibility.
• Support implementation of identity, access management, logging, monitoring, data protection, network security, and other cloud security controls.

Hybrid Cloud & On-Premises Security

• Design and support the integration of security controls across cloud services and on-premises infrastructure.
• Assess complex hybrid environments and identify security risks across interconnected technologies.
• Support efforts to modernize legacy systems and transition workloads to secure cloud solutions where appropriate.
• Develop transformational security roadmaps using phased and capability-maturity approaches to help customers securely advance their cloud environments.
• Provide security guidance for organizations maintaining substantial on-premises infrastructure alongside cloud environments.

Risk Management & Compliance

• Identify, assess, prioritize, and communicate cybersecurity risks across cloud and on-premises environments.
• Recommend practical risk mitigation strategies based on business impact, likelihood, technical feasibility, and customer priorities.
• Assess security environments against applicable frameworks, regulations, and industry standards, including NIST, ISO 27001, PCI DSS, and other relevant requirements.
• Support internal and external audits, security assessments, and compliance initiatives.
• Translate technical findings into clear risk statements and actionable recommendations for technical and business stakeholders.

Incident Response & Threat Management

• Develop and enhance incident response procedures for cloud and hybrid environments.
• Participate in investigations of security incidents and support containment, remediation, and recovery activities.
• Analyze security events and technical findings to identify root causes and opportunities for control improvement.
• Incorporate relevant threat intelligence and emerging attack techniques into security recommendations and defensive strategies.

Customer & Stakeholder Engagement

• Collaborate with directors, technical leaders, customer stakeholders, and executive leadership to communicate security strategies, risks, recommendations, and project status.
• Lead and participate in technical discussions, customer meetings, assessments, workshops, and presentations.
• Communicate complex cybersecurity concepts clearly to both technical and non-technical audiences.
• Work collaboratively with cross-functional teams to ensure security requirements are understood, appropriately prioritized, and implemented.
• Develop clear, concise, and professional customer-facing documentation, technical recommendations, roadmaps, and deliverables.
• Represent Cream City Cyber professionally in customer engagements, industry forums, and other appropriate events.

Continuous Improvement & Innovation

• Maintain current knowledge of emerging cloud security technologies, vulnerabilities, threats, attack techniques, and industry trends.
• Evaluate security technologies and recommend tools or solutions that improve customer security outcomes.
• Identify opportunities to improve internal methodologies, technical standards, processes, and customer deliverables.
• Drive continual risk reduction through practical, iterative improvements across cloud and hybrid security environments.
• Explore responsible applications of automation and artificial intelligence to improve security operations, analysis, and threat detection.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Technology, or a related field, or equivalent combination of education and relevant professional experience.
• 8+ years of progressive experience in information technology, cybersecurity, or information security, including at least 5 years of significant cloud security experience.
• Demonstrated advanced knowledge of Microsoft Azure security services, architectures, configurations, and security best practices.
• Strong knowledge of Microsoft 365 security technologies and configurations.
• Advanced PowerShell experience, including scripting and automation.
• Significant experience securing on-premises infrastructure and complex hybrid environments.
• Strong understanding of identity and access management, network security, endpoint security, data protection, logging, monitoring, and cloud security controls.
• Strong understanding of cybersecurity frameworks, risk management practices, and regulatory or compliance requirements.
• Demonstrated ability to identify technical security risks and develop practical mitigation and remediation strategies.
• Experience developing technical documentation, security recommendations, implementation plans, and customer-facing deliverables.
• Strong written and verbal communication skills with the ability to effectively communicate technical concepts to both technical and non-technical stakeholders.
• Demonstrated ability to manage multiple priorities, customer engagements, and project deadlines.

Preferred Qualifications

• Advanced industry certifications such as CISSP, CCSP, Microsoft Certified: Azure Solutions Architect Expert, Microsoft cybersecurity certifications, or equivalent credentials.
• Experience supporting large-scale cloud migrations, modernization efforts, or transformation initiatives.
• Experience designing and implementing Zero Trust security architectures.
• Knowledge of enterprise security technologies, including SIEM, CASB, DLP, PAM, vulnerability management, endpoint security, and identity security solutions.
• Experience with networking and network security technologies, including Palo Alto Networks firewalls or comparable enterprise security platforms.
• Experience with infrastructure-as-code, cloud automation, or security automation technologies.
• Experience applying artificial intelligence or machine learning technologies to security operations, analysis, automation, or threat detection.
• Previous consulting, professional services, or customer-facing cybersecurity experience.

Skills & Competencies

Technical Expertise: Demonstrates advanced knowledge of cloud, hybrid, and on-premises security technologies and architectures, with the ability to apply that knowledge to complex customer environments.

Security & Risk Management: Effectively identifies, evaluates, prioritizes, and communicates cybersecurity risks and develops practical mitigation strategies.

Customer Focus: Builds credibility and trust with customers by understanding their business needs and providing thoughtful, practical, and technically sound recommendations.

Problem Solving: Approaches complex technical and security challenges analytically and develops solutions that balance risk reduction, operational requirements, and business objectives.

Communication & Influence: Communicates complex cybersecurity concepts clearly and effectively to engineers, business leaders, executives, customers, and other stakeholders.

Project Execution: Effectively manages multiple priorities, responsibilities, deliverables, and deadlines while maintaining high standards for quality and accuracy.

Collaboration: Works effectively across teams and disciplines and contributes positively to customer and internal project teams.

Continuous Learning & Innovation: Maintains current technical knowledge and actively identifies opportunities to improve security practices, technologies, processes, and customer outcomes.

Integrity & Professionalism: Demonstrates sound judgment, discretion, accountability, and a commitment to ethical cybersecurity practices and the protection of Company and customer information.