> Markdown version of [/jobs/ext/1327723-senior-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/1327723-senior-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cloud Security Engineer - **Company:** Semperis Inc. - **Location:** Austin, TX, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Kubernetes Security, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing, Cloud Computing Security, Cloud Database, Cloud Engineering, Cyber Security, Computer Networks, Identity and Access Management, Python (Programming Language), Network Security, Network Segmentation, Windows PowerShell, Role-Based Access Control, Service Design, Cloud-native Network Functions (CNF), Scripting, Cloud Platform System, Firewalls (Computer Science), Cloudformation, Kubernetes, Infrastructure Automation Frameworks, Bicep, Terraform, Devsecops - **Published:** July 18, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a8fb9c6f17f41578 ## About the Role * 6+ years of experience in cloud security, security engineering, or cloud platform engineering roles. * Deep hands-on security experience in Azure or AWS is required; experience across both is strongly preferred. * Hands-on experience securing production AKS/EKS environments, including RBAC, network policies, workload identity, admission controls, image/runtime controls, and cluster hardening. * Proven experience with cloud network security, including firewalls, WAFs, network segmentation, and secure connectivity patterns. * Strong understanding of cloud security architecture, including shared responsibility models, secure service design, and defense-in-depth. * Experience with preventative security controls, including CSPM, policy enforcement, and secure cloud baselines. * Cloud automation experience using Infrastructure as Code tools such as Terraform, Bicep, or CloudFormation, plus scripting with Python, PowerShell, Bash, or similar languages. * Ability to operate independently, own complex problem spaces, and deliver practical, scalable solutions. * Strong communication skills and comfort providing architecture-level guidance to engineering teams. * + Experience working in regulated environments Bonus Points * Experience contributing to or supporting compliance programs such as FedRAMP, SOC 2, ISO 27001, or NIST frameworks. * Familiarity with CI/CD pipelines and DevSecOps practices. * Experience with identity and access management in cloud environments (RBAC, workload identity, service principals) is a strong plus. ## Description We are looking for a Senior Cloud Security Engineer to help build secure-by-default cloud platforms across Azure and AWS. This is an engineering-focused role centered on preventive controls, scalable guardrails, Kubernetes security, network security, and automation, not a SOC or incident-response-first position. Primary focus areas: cloud security guardrails, Kubernetes security, cloud network controls, and automation across Azure and AWS What You Will Do * + You will own the security architecture, guardrails, and automation patterns, while partnering with platform and infrastructure teams on implementation. * Own and evolve Cloud Security Posture Management (CSPM) capabilities, including policies, guardrails, and automated remediation. * Engineer and maintain cloud network security controls, including network segmentation and isolation, cloud-native firewalls and security groups, Application Gateway / WAF configurations, and secure ingress and egress patterns. * Define and enforce security best practices for Kubernetes environments (AKS/EKS), including RBAC, network policies, workload isolation, and cluster hardening. * Partner with engineering teams on architecture reviews for new services, platforms, and major changes, helping teams design secure, compliant, and practical solutions. * Engineer and maintain identity and access security controls for cloud and production environments, including least privilege, workload identity, service principals, and conditional access. * Apply a security lens to FinOps, defining guardrails that balance cost optimization with security and compliance. * Develop tooling, automation, and self-service workflows that reduce manual effort and improve consistency across security programs. * Communicate complex security risks and technical recommendations clearly to engineering teams, leadership, and cross-functional stakeholders. * Mentor junior engineers and contribute to raising the overall security maturity of the organization. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Back(end) to the Future: Embracing the continuous Evolution of Infrastructure and Code](https://www.wearedevelopers.com/videos/440-back-end-to-the-future-embracing-the-continuous-evolution-of-infrastructure-and-code) - [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)