Senior Cloud Security Engineer

Bm Associates - Sacramento, CA

Full-time - Senior

Sacramento, CA

Professional, Scientific, and Technical Services

About the position

The Senior Cloud Security Engineer is responsible for developing and implementing technical solutions to mitigate security vulnerabilities in cloud environments. This role requires extensive experience in cloud networking architecture, security frameworks, and incident response, as well as collaboration with both technical and non-technical teams to enhance business enablement through security measures.

Responsibilities

• Develop and implement technical solutions to mitigate security vulnerabilities.
• Collaborate with technical and non-technical teams to promote security ideas that support business enablement.
• Integrate security into DevOps pipelines using Infrastructure as Code (IaC) tools.
• Automate security tasks through APIs and cloud automation frameworks.
• Manage complex local and international security requirements.
• Utilize threat intelligence services in a production environment.
• Conduct incident response, system configuration, and vulnerability management.

Requirements

• Minimum of seven (7) years of experience in developing and implementing technical solutions for security vulnerabilities.
• Bachelor's degree in an IT-related or Engineering field.
• Minimum of five (5) years of experience in cloud networking architecture and operations, with CASB experience.
• Minimum of three (3) years of experience with configuration as code and infrastructure as code solutions such as Terraform, Ansible, Powershell DSC, and GIT.
• Minimum of seven (7) years of experience in network and encryption, including VPNs, IPsec, SSL/TLS, LDAP, and PKI.
• Minimum of five (5) years of experience with scripting languages such as Python, PowerShell, and bash.
• Minimum of two (2) years of experience using threat intelligence services in a production environment.
• Minimum of five (5) years of experience in incident response, system configuration, vulnerability management, and hardening guidelines.
• Minimum of five (5) years of experience in problem-solving for complex security requirements.
• Minimum of five (5) years of experience collaborating with teams to support business enablement.
• Minimum of three (3) years of experience with Microsoft EntraID (Azure AD), AWS IAM policies, and RBAC.
• Minimum of three (3) years of experience automating security tasks through APIs and cloud automation frameworks.
• Minimum of three (3) years of experience integrating security into DevOps pipelines using IaC tools.
• Minimum of three (3) years of experience with security frameworks such as NIST, CSF, ISO 27000 series, MITRE, OWASP.
• Minimum of three (3) years of experience with Zero Trust security models and IAM, including MFA and PAM.
• Current certification in at least two of the following: MS Cybersecurity Architect Expert, Azure Security Engineer Associate, AWS Certified Security, CompTIA Cloud +, CompTIA Security +, CCSP, GCSA.