Principal Cloud Security Engineer

Pegasystems Inc.
Cambridge, United States of America
4 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior
Compensation
$ 198K

Job location

Cambridge, United States of America

Tech stack

Artificial Intelligence
Amazon Web Services (AWS)
Amazon Web Services (AWS)
Cloud Computing
Cloud Computing Security
Cloud Engineering
Linux
DevOps
Federal Information Processing Standards (FIPS)
Python
Linux Distribution
Powershell
Reliability Engineering
Ansible
Technical Data Management Systems
Software Vulnerability Management
Pega
Scripting (Bash/Python/Go/Ruby)
Cloud Platform System
Amazon Web Services (AWS)
Cloudformation
Containerization
Selinux
Kubernetes
Infrastructure Automation Frameworks
Terraform
Splunk
Api Management

Job description

Cloud Security Engineering (CSE) is responsible for protecting Pega's cloud infrastructure, applications, and data across AWS and GCP environments. The team partners closely with Cloud Operations, Service Reliability, and Engineering to ensure our environments are secure, scalable, and resilient.

Picture Yourself at Pega:

You will join a fast-paced team dedicated to maintaining and improving cloud security systems and infrastructure to support mission-critical applications. In this role, you will own and deliver improvements for security-related systems, collaborate with stakeholders for change management, assist in incident response, and support ongoing improvements to cloud security practices and governance.

What You'll Do at Pega:

  • Own the implementation and maintenance of critical cloud security systems and supporting infrastructure

  • Automate manual system administration and infrastructure tasks

  • Contribute to the strategic direction of security controls across multiple cloud providers

  • Assist with vulnerability management, remediation tracking, and risk mitigation efforts

  • Partner with Cloud Operations and Engineering teams to provide guidance on secure configurations and best practices

  • Help maintain and improve security policies, standards, and procedures

  • Stay current on emerging cloud security threats and trends, Pega embraces the responsible use of artificial intelligence (AI) to improve efficiency, consistency, and fairness across our business. We encourage thoughtful and ethical adoption of AI technologies that support people-not replace them. We may use AI-enabled tools in our recruitment process. These tools are designed to assist us by providing insights and operational support.

All hiring decisions are made based on human review and judgment. You may have the right to request human review, provide additional information, or raise questions about how such tools are used.

Culture

At Pegasystems, we foster an environment where people feel valued and empowered to contribute their best. With global clients across industries and regions, we know our success depends on the unique perspectives, experiences, and talents of our people. Ours is a workplace where everyone can grow, collaborate, and deliver meaningful outcomes.

We encourage candidates from all backgrounds and experiences and focus on the core competencies and mindset needed to thrive in a role.

As an Equal Opportunity employer, Pegasystems will not discriminate in its employment practices due to an applicant's race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, veteran or disability status, or any other category protected by law.

Export Compliance

For positions requiring access to technical data subject to export control regulations such as this, Pegasystems may need to obtain export license approval from the U.S. Government and EU Authorities for certain individuals.

Requirements

  • Passionate about cloud technologies and security best practices and have strong opinions about AI security

  • Hands-on experience with AWS core services (EC2, VPC)

  • Familiarity with infrastructure-as-code tools (Terraform, CloudFormation)

  • Comfortable with scripting (Python, Ansible, PowerShell or similar)

  • Strong problem-solving skills with the ability to troubleshoot and escalate appropriately

  • Collaborative team player with strong communication skills

What You've Accomplished:

Required:

  • 8+ years of experience in cloud engineering, cloud operations, SRT, SRE, DevOps, cloud security in cloud environments

  • Demonstrated strong understanding of cloud security concepts and controls

  • Experience automating and securing Linux systems and cloud-based infrastructure (SELinux, FIPS)

  • Experience with security monitoring, alerting, or incident response (Splunk, Chronicle, CrowdStrike)

  • Experience with containerized deployments

Preferred:

  • Experience with Kubernetes

  • Experience with multiple Linux distributions

  • Work in FedRAMP or DOD Impact Level-rated environments

  • Exposure to DevOps tools and CI/CD pipelines

  • Familiarity with API integrations or modern cloud-native architectures

  • Windows System Administration, automation

Benefits & conditions

Base salary range for this role is 129,700 - 197,600 USD annually. This role may also be eligible for annual bonus OR commission, as well as benefits and other incentives.

Apply for this position