> Markdown version of [/jobs/ext/3056603-principal-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/3056603-principal-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Cloud Security Engineer - **Company:** Echo Global Logistics - **Location:** Chicago, IL, United States (Remote available) - **Salary:** $129,352.0 - $188,077.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Artificial Intelligence, Amazon Web Services, C Sharp (Programming Language), Cloud Computing Security, Cyber Security, Continuous Integration, Python (Programming Language), Reliability Engineering, Security Information and Event Management, Software Engineering, TypeScript, Policy as Code, Data Logging, Cloud-native Network Functions (CNF), Cloud Platform System, Kubernetes, Production Code, Terraform, Serverless Computing, Golang - **Published:** September 24, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/86991081/1 ## About the Role * 8+ years software engineering, platform engineering, SRE, infrastructure engineering, or cloud security, with substantial recent experience building and securing AWS environments through code. * Strong hands-on experience in AWS security engineering in multi-account environments * Deep experience with infrastructure-as-code, especially Terraform, including reusable modules and tested patterns. * Strong software engineering or platform engineering background; ability to write production-quality code in at least one modern language such as C#, Go, Python, Java, or TypeScript * Experience with policy-as-code, preventive guardrails, configuration governance, or cloud-native policy enforcement * Hands-on experience securing Kubernetes/EKS and serverless patterns in AWS * Experience building detective and preventive controls for cloud logging, monitoring, and control plane integrity. * Experience partnering with platform and engineering teams in a product-oriented environment through design reviews, pull requests, and developer enablement. * Ability to translate risk into practical, durable technical controls and communicate architecture decisions clearly in writing. Preferred qualifications * Experience integrating cloud telemetry into a SIEM, XDR, or modern SOC platform * Familiarity with hybrid connectivity and cloud network controls; experience with Palo Alto or Prisma is helpful but not required. * Experience with CI/CD security patterns, reusable modules, and secure platform enablement. * Experience securing AI/GenAI services, internal copilots, or agentic workflows in cloud environments. ## Description * Design and implement secure-by-default AWS account, organization, and baseline guardrail patterns across multi-account environments. * Build and maintain reusable Terraform modules, policy-as-code, and infrastructure delivery patterns that prevent high-risk actions, reduce drift, and improve traceability. * Partner with Platform and Architecture to establish security account, centralized logging, onboarding, identity, and baseline control patterns. * Implement and tune Service Control Policies and related preventive controls for high-risk cloud actions. * Establish logging integrity protections and detection coverage for tampering with CloudTrail, logging pipelines, and core monitoring controls. * Define cloud telemetry standards so security-relevant AWS, EKS, Lambda, and CI/CD workflow events are usable by XSIAM and MDR workflows. * Create approved Terraform modules, paved-road patterns, and secure reference architectures for engineering teams. * Provide security design input for hybrid and network-connected cloud architectures without becoming the day-to-day firewall backlog owner. * Embed security controls into CI/CD and infrastructure delivery workflows so policy validation happens in code paths, not after deployment. * Collaborate with Security Operations to improve cloud detection content, alert quality, response workflows, and support automated validation and drift detection for cloud security controls. What success looks like In the first 90 days, this role is expected to help establish the AWS security baseline, publish an initial guardrail library, define Terraform module standards, and identify the highest-risk cloud patterns that need to be converted into secure defaults. Over 12 months, success means the organization has adopted reusable cloud security building blocks, high-risk AWS actions are constrained through policy and account design, telemetry is reliable and actionable, and engineering teams can ship through approved paths with materially less manual security friction. ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall) - [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) ## Related Articles - [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud) - [What is Software Engineering in the Age of AI?](https://www.wearedevelopers.com/magazine/640-what-is-software-engineering-in-the-age-of-ai) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)