Cloud Security Engineer

E.C.I. - Sacramento, CA

Full-time

Sacramento, CA

Nursing and Residential Care Facilities

About the position

The Cloud Security Engineer position at Estrada Consulting Inc focuses on developing and implementing technical solutions to mitigate security vulnerabilities in cloud environments. The role requires extensive experience in cloud networking architecture, security frameworks, and incident response, along with a strong background in scripting and automation. The ideal candidate will collaborate with both technical and non-technical teams to enhance security measures and support business objectives.

Responsibilities

• Develop and implement technical solutions to mitigate security vulnerabilities.
• Design and manage cloud networking architecture and operations.
• Utilize cloud access security broker (CASB) solutions effectively.
• Implement configuration as code and infrastructure as code solutions using tools like Terraform and Ansible.
• Manage network and encryption protocols including VPNs, IPsec, and SSL/TLS.
• Utilize scripting languages such as Python and PowerShell for automation tasks.
• Employ threat intelligence services in a production environment.
• Conduct incident response and vulnerability management activities.
• Collaborate with teams to promote security ideas that support business enablement.
• Integrate security into DevOps pipelines using Infrastructure as Code tools.
• Apply security frameworks such as NIST and OWASP in practice.
• Implement Zero Trust security models and manage Identity and Access Management (IAM) protocols.

Requirements

• Bachelor's degree in an IT-related or Engineering field, or equivalent experience.
• Minimum of seven (7) years of experience in developing and implementing security solutions.
• Five (5) years of Full-Time Equivalent (FTE) experience in cloud networking architecture and operations.
• Three (3) years of FTE experience with configuration as code and infrastructure as code solutions.
• Seven (7) years of FTE experience in network and encryption technologies.
• Five (5) years of FTE experience with scripting languages like Python and PowerShell.
• Two (2) years of FTE experience using threat intelligence services in production.
• Five (5) years of FTE experience in incident response and vulnerability management.
• Five (5) years of FTE experience in problem-solving for complex security requirements.
• Five (5) years of FTE experience collaborating with diverse teams.
• Three (3) years of FTE experience with Microsoft EntraID (Azure AD) and AWS IAM policies.
• Three (3) years of FTE experience automating security tasks through APIs.
• Three (3) years of FTE experience integrating security into DevOps pipelines.
• Three (3) years of FTE experience with security frameworks like NIST and MITRE.
• Three (3) years of FTE experience with Zero Trust security models and IAM.

Nice-to-haves

• Current certification in MS Cybersecurity Architect Expert, Azure Security Engineer Associate, AWS Certified Security, CompTIA Cloud +, CompTIA Security +, Certified Cloud Security Professional (CCSP), or GIAC Cloud Security Automation (GCSA).