Senior Cloud Security Engineer

Join our expanding Cloud Security team as a Senior Cloud Security Engineer. In this engineering-focused role, you will build secure-by-default cloud platforms across Azure and AWS, with a primary focus on cloud security guardrails, Kubernetes security, cloud network controls, and automation. You will own the security architecture, guardrails, and automation patterns, while partnering with platform and infrastructure teams on implementation. Additionally, you will mentor junior engineers and contribute to raising the overall security maturity of the organization.

• Concevoir et mettre en œuvre des architectures de sécurité cloud, des garde-fous et des modèles d'automatisation.
• Posséder et faire évoluer les capacités de gestion de la posture de sécurité cloud (CSPM), y compris les politiques, les garde-fous et l'automatisation de la remédiation.
• Collaborer avec les équipes d'ingénierie sur les examens d'architecture pour de nouveaux services, en aidant les équipes à concevoir des solutions sécurisées et conformes.
• Deep hands-on security experience in Azure or AWS is required; experience across both is strongly preferred
• Experience working in regulated environments
• Hands-on experience securing production AKS/EKS environments, including RBAC, network policies, workload identity, admission controls, image/runtime controls, and cluster hardening
• Cloud automation experience using Infrastructure as Code tools such as Terraform, Bicep, or CloudFormation, plus scripting with Python, PowerShell, Bash, or similar languages
• Experience with preventative security controls, including CSPM, policy enforcement, and secure cloud baselines
• 6+ years of experience in cloud security, security engineering, or cloud platform engineering roles
• Strong communication skills and comfort providing architecture-level guidance to engineering teams
• Ability to operate independently, own complex problem spaces, and deliver practical, scalable solutions
• Strong understanding of cloud security architecture, including shared responsibility models, secure service design, and defense-in-depth
• Proven experience with cloud network security, including firewalls, WAFs, network segmentation, and secure connectivity patterns
• Experience contributing to or supporting compliance programs such as FedRAMP, SOC 2, ISO 27001, or NIST frameworks
• Familiarity with CI/CD pipelines and DevSecOps practices
• Experience with identity and access management in cloud environments (RBAC, workload identity, service principals) is a strong plus