Principal Cloud Security Engineer
Role details
Job location
Tech stack
Job description
Cloud Security Engineering (CSE) is responsible for protecting Pega's cloud infrastructure, applications, and data across AWS and GCP environments. The team partners closely with Cloud Operations, Service Reliability, and Engineering to ensure our environments are secure, scalable, and resilient.
Picture Yourself at Pega:
You will join a fast-paced team dedicated to maintaining and improving cloud security systems and infrastructure to support mission-critical applications. In this role, you will own and deliver improvements for security-related systems, collaborate with stakeholders for change management, assist in incident response, and support ongoing improvements to cloud security practices and governance.
What You'll Do at Pega:
-
Own the implementation and maintenance of critical cloud security systems and supporting infrastructure
-
Automate manual system administration and infrastructure tasks
-
Contribute to the strategic direction of security controls across multiple cloud providers
-
Assist with vulnerability management, remediation tracking, and risk mitigation efforts
-
Partner with Cloud Operations and Engineering teams to provide guidance on secure configurations and best practices
-
Help maintain and improve security policies, standards, and procedures
-
Stay current on emerging cloud security threats and trends, Pega embraces the responsible use of artificial intelligence (AI) to improve efficiency, consistency, and fairness across our business. We encourage thoughtful and ethical adoption of AI technologies that support people-not replace them. We may use AI-enabled tools in our recruitment process. These tools are designed to assist us by providing insights and operational support.
All hiring decisions are made based on human review and judgment. You may have the right to request human review, provide additional information, or raise questions about how such tools are used.
Culture
At Pegasystems, we foster an environment where people feel valued and empowered to contribute their best. With global clients across industries and regions, we know our success depends on the unique perspectives, experiences, and talents of our people. Ours is a workplace where everyone can grow, collaborate, and deliver meaningful outcomes.
We encourage candidates from all backgrounds and experiences and focus on the core competencies and mindset needed to thrive in a role.
As an Equal Opportunity employer, Pegasystems will not discriminate in its employment practices due to an applicant's race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, veteran or disability status, or any other category protected by law.
Export Compliance
For positions requiring access to technical data subject to export control regulations such as this, Pegasystems may need to obtain export license approval from the U.S. Government and EU Authorities for certain individuals.
Requirements
-
Passionate about cloud technologies and security best practices and have strong opinions about AI security
-
Hands-on experience with AWS core services (EC2, VPC)
-
Familiarity with infrastructure-as-code tools (Terraform, CloudFormation)
-
Comfortable with scripting (Python, Ansible, PowerShell or similar)
-
Strong problem-solving skills with the ability to troubleshoot and escalate appropriately
-
Collaborative team player with strong communication skills
What You've Accomplished:
Required:
-
8+ years of experience in cloud engineering, cloud operations, SRT, SRE, DevOps, cloud security in cloud environments
-
Demonstrated strong understanding of cloud security concepts and controls
-
Experience automating and securing Linux systems and cloud-based infrastructure (SELinux, FIPS)
-
Experience with security monitoring, alerting, or incident response (Splunk, Chronicle, CrowdStrike)
-
Experience with containerized deployments
Preferred:
-
Experience with Kubernetes
-
Experience with multiple Linux distributions
-
Work in FedRAMP or DOD Impact Level-rated environments
-
Exposure to DevOps tools and CI/CD pipelines
-
Familiarity with API integrations or modern cloud-native architectures
-
Windows System Administration, automation
Benefits & conditions
Base salary range for this role is 129,700 - 197,600 USD annually. This role may also be eligible for annual bonus OR commission, as well as benefits and other incentives.