Cloud Security Engineer

About the position

The Cloud Security Engineer is critical to ensuring the secure adoption and management of cloud technologies, supporting the organization's strategic growth and innovation objectives. This individual is responsible for designing, implementing, and maintaining robust cloud security controls across our hybrid cloud environment, mitigating risks while enabling the organization to scale securely.

Responsibilities

• Design and implement cloud security architecture solutions that align with best practices and regulatory standards while also meeting business requirements
• Design and enforce secure access and authentication mechanisms, including the use of MFA, SSO, and IAM/IGA principles
• Implement and manage cloud-native security tools, such as Azure Security Center, AWS GuardDuty, or Google Cloud Security Command Center
• Monitor and respond to cloud-specific security alerts, coordinating with the Incident Response team as needed
• Triage security issues and provide remediation solutions as needed
• Conduct vulnerability assessments to identify potential security risks within the cloud environment
• Develop and maintain cloud security policies, standards, and guidelines tailored to hybrid cloud environments
• Maintain documentation of cloud architecture, configurations, and processes for future reference and compliance
• Ensure cloud configurations comply with regulatory requirements (e.g., GLBA, PCI DSS, NCUA) and internal audit standards
• Oversee cloud data encryption, backup, and disaster recovery strategies to safeguard sensitive member data
• Conduct cloud risk assessments, identifying and mitigating vulnerabilities in collaboration with the Security Governance, Threat Intelligence, and Vulnerability Management teams
• Leverage automation tools (e.g., Terraform, CloudFormation, CI/CD pipelines) to enforce security controls and streamline cloud security operations
• Optimize cloud security processes to balance security and performance needs effectively
• Partner with DevOps, IT, and application development teams to embed security into the software development lifecycle (DevSecOps)
• Provide guidance and training to teams on secure cloud practices, tools, and emerging threats
• Maintain knowledge and understanding of current trends, laws, and issues affecting the area of expertise
• Attend educational events to increase professional knowledge
• Complete annual compliance and info security training to understand employee's role in maintaining effective compliance and security programs

Requirements

• Bachelor's degree in Information Security, Computer Science, or related field (A comparable combination of work experience and training may be substituted for education requirements.)
• Certifications such as AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Google Professional Cloud Security Engineer
• 3+ years of experience in cloud security or a related role for a medium to large organization
• Direct experience with cloud security solutions and tools for platforms like Azure, AWS, or Google Cloud
• Strong analytical skills with a deep understanding of cloud security frameworks, tools, and technologies (e.g., CASB, CWPP, CSPM)
• Proficiency in scripting and automation languages such as Python, PowerShell, or Bash
• Familiarity with hybrid cloud architectures and integrating on-premise and cloud systems securely
• Knowledge of best practices related to security, performance optimization, and disaster recovery
• Strong problem-solving and troubleshooting skills with the ability to identify security issues, propose solutions, and resolve problems
• Ability to prioritize tasks by effectively managing competing and changing priorities to meet deadlines
• Accurate, detail-oriented, and organized with task management
• Ability to analyze and resolve difficult and often complex problems or situations
• Strong written, verbal, and interpersonal communication skills to interact effectively with members, staff, vendors, and government regulators
• Strong knowledge and understanding of credit union products, services, policies, and procedures
• Strong knowledge and understanding of regulatory compliance
• Strong knowledge and understanding of credit union computer systems and software applications required to perform job duties

Benefits

• Bonus Program up to 12%
• 401K Matching up to 8%
• Retirement Planning
• Pay Increases based on Competency
• Employee Loan Discounts
• Flex Spending Accounts
• Medical Coverage
• Dental and Vision Coverage
• Access to 4,000+ Gyms
• Mental Health Resources
• PTO Wellness Days
• Short Term and Long Term Disability Coverage
• 11 Paid Holidays
• 3 weeks of Paid Time Off
• 4 weeks of Paid Parental Leave
• Birthday PTO
• Paid Volunteer Hours
• Degree Assistance up to $5,000 per year