Cloud Security Engineer

About the role

You will engineer secure, automated, and scalable cloud environments across GCP, AWS, and Azure. You will embed security into Terraform‑based provisioning workflows, enforce hardened baselines through golden images and guardrails, and drive technical enforcement of best practices across infrastructure layers, from identity to workloads.

Key responsibilities

• Design and implement security controls across cloud environments such as GCP, AWS, and Azure.
• Develop and maintain IaC modules and Ansible playbooks for secure infrastructure automation.
• Leverage CSPM and CNAPP platforms to manage cloud security posture, identity risks, and vulnerability remediation.
• Configure and optimize CASB, ZTNA, SaaS visibility, and data protection controls.
• Build automated guardrails, policy enforcement, and detection logic using cloud‑native tools.
• Improve and maintain IAM governance, least‑privilege access, and identity lifecycle workflows.
• Enhance network security, workload protection, logging, monitoring, and encryption/KMS configurations.
• Deploy and manage Kubernetes security initiatives across clusters and workloads.
• Contribute to cloud incident response, threat investigations, and detection engineering efforts.
• Drive continuous improvement of cloud security tooling, automation, and operational processes.
• Ensure cloud environments align with CIS, NIST, and internal governance requirements.
• Keep cloud infrastructure current, make recommendations, and continually improve cloud security technologies.
• Collaborate with analysts, engineers, and data scientists to improve cyber resilience.
• Participate in post‑incident reviews and propose engineering resolutions for future incidents.

Required profile

• 3+ years of experience in DevSecOps or Cloud Security roles.
• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Hands‑on experience securing cloud environments (GCP, AWS, Azure), including implementing IAM, network, workload, logging, monitoring, and encryption controls.

Required skills

• GCP
• AWS
• Azure
• Terraform
• Ansible
• CSPM
• CNAPP
• CASB
• ZTNA
• IAM
• Kubernetes
• KMS
• CIS
• NIST