Cloud Security Engineer Advanced

Responsibilities

• Partner with internal teams to incorporate security requirements into cloud architecture modernization application onboarding access enablement and vendor integration efforts.

• Provide security architecture review and design recommendations for public cloud platforms internet-facing applications APIs workloads and data flows to improve control consistency and reduce unmanaged exposure.

• Assess cloud designs against enterprise security standards regulatory expectations and industry frameworks; document architecture findings risk decisions exception rationale and recommended remediation options.

• Adviseon standardized perimeter controls Zero Trust access patterns private access segmentation secure connectivity and identity-based access approaches for users workloads applications and third parties.

• Review cloud configuration IAM network routing encryption logging monitoring and telemetry requirements; identify gaps and coordinate practical next steps with accountable technology owners.

• Support adoption and consistent use of cloud-native and enterprise security capabilities including CNAPP CSPM CWPP CIEM KSPM WAF IDS/IPS secure web gateway SASE and ZTNA capabilities where applicable.

• Articulate cloud security risk business impact control tradeoffs and remediation priorities to technical teams management stakeholders and security leadership.

• Maintain reusable cloud security guidance decision records control recommendations status updates escalation points and next steps for cross-functional delivery teams.

• Contribute to Security Architecture objectives by strengthening secure-by-design delivery improving cloud control maturity and enabling consistent architecture governance across cloud platforms.

Minimum Qualifications

• Bachelors degree in Information Security Computer Science Engineering Information Systems or equivalent experience.

• 5 years of experience in information security cloud engineering cloud security architecture network security or infrastructure security.

• Direct experience partnering with Cloud Engineering Network Identity Security Operations and application teams to assess risk and recommend secure design patterns.

• Strong understanding of public cloud security concepts across AWS Azure GCP and other cloud platforms.

• Experience evaluating cloud architecture designs identifying security gaps articulating risk and recommending practical controls that can be implemented by accountable engineering and operations teams.

Preferred Qualifications

• Advanced degree preferred.

• Cloud security architecture or engineering certifications such as CCSP CISSP AWS Security Specialty Azure Security Engineer Google Professional Cloud Security Engineer or equivalent preferred.

• Knowledge of Zero Trust SASE ZTNA secure web gateway DNS security cloud firewall WAF IDS/IPS segmentation and private access patterns for users workloads APIs and internet-facing applications.

• Familiarity with CNAPP CSPM CWPP CIEM KSPM cloud-native security services infrastructure-as-code scanning and policy-as-code approaches used to detect prioritize and reduce cloud exposure.

• Working knowledge of secure SDLCDevSecOps CI/CD pipelines Terraform or similar infrastructure-as-code tooling container and Kubernetes security API security and secure configuration baselines.

Key Skills and Competencies

• Knowledge of cloud identity and access management including least privilege privileged access workload identities service accounts federated access conditional access and non-human identity risk.

• Ability to interpret cloud security findings misconfigurations exposure paths vulnerability data and telemetry; distinguish material risk from noise; and communicate prioritized remediation options.

• Ability to apply enterprise security policies audit expectations and frameworks such as NIST CIS CSA CCM and OWASP to cloud architecture reviews standards guidance and exception recommendations.

• Strong communication coordination analytical facilitation and project management skills.

• Proven ability to influence teams without direct authority and drive clarity on ownership risk acceptance remediation plans and next steps.

• Demonstrated ability to operate effectively in a fast-paced globally distributed environment with limited dedicated staffing competing priorities and shared internal responsibility.