Cyber Cloud Solution Engineer Lead/Staff

As an Advanced Cloud Security Engineer, you will serve as a technical anchor for our enterprise cloud defense strategy. Your primary mission will be engineering, implementing, and monitoring robust security guardrails within our Amazon Web Services (AWS) ecosystems, while providing critical secondary security engineering support across our multi-cloud footprint, including Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI). 

In this role, you won't just be managing alerts—you will be treating infrastructure as code, embedding security directly into the CI/CD pipeline, and defining policy as code to enforce continuous compliance. Additionally, you will play a key role in managing and optimizing our third party SSE (Security Service Edge) platform to seamlessly secure data, web, and cloud access across AWS, Azure, and GCP environments. 

What you’ll do:

Essential Job Functions & Tasks

Responsibilities include the following related to securing cloud compute, network, storage, and end user infrastructure: 

• AWS Security Engineering: Design, build, and maintain enterprise-grade security controls utilizing third party SSE and native AWS security services. 

• Multi-Cloud Support: Provide primary to AWS / secondary security engineering, posture management, and threat detection support for Azure, GCP, and OCI environments. 

• DevSecOps & Automation: Work with our Cloud Engineering group to help operationalize Infrastructure as Code (IaC) and Policy as Code (PaC) to automate security guardrails, vulnerability scanning, and compliance checks. 

• SSE Management: Architect and maintain policies within the third party SSE platform to protect corporate data and govern cloud applications across our primary cloud environments. 

• Incident Response & Threat Hunting: Partner with our SOC to investigate cloud-specific security incidents, develop automated remediation playbooks, and conduct threat-modeling exercises. 

 Preferred Capabilities and Qualifications 

Candidates must demonstrate a deep, hands-on technical understanding and operational compatibility with the following: 

• Native AWS Security Ecosystem: Comprehensive understanding of AWS security services, including but not limited to: AWS IAM (complex policies, permission boundaries, organizations), AWS GuardDuty, AWS Security Hub, AWS Config, AWS CloudTrail, KMS, Macie, and Network Firewall.