Cloud Security Engineering Specialist

• Cloud Security Engineering: Design, implement, and continuously improve security across enterprise multi-cloud environments (Azure, GCP, and OCI) by developing secure landing zones, cloud security architectures, identity controls, Infrastructure as Code (Terraform) guardrails, and Kubernetes/container security capabilities.
• CNAPP & Cloud Risk Management: Engineer and optimize Cloud-Native Application Protection Platform (CNAPP) capabilities. Drive vulnerability prioritization, remediation strategies, configuration drift detection, and continuous compliance across cloud environments.
• Threat Detection & Security Automation: Develop automated security controls, policy enforcement, and remediation workflows to improve cloud visibility, operational efficiency, and secure-by-default deployments.
• AI Security & Governance: Partner with AI Security, AI Engineering, and Cloud Engineering teams to assess AI technologies and workloads, prioritize and mitigate AI-related risks, develop cloud and AI security standards and technical controls, and support the secure AI development lifecycle (AI SDLC).
• Technical Leadership & Security Standards: Develop cloud security standards, perform design reviews and threat modeling, evaluate emerging technologies, and mentor team members through technical guidance, knowledge sharing, and hands-on coaching.

• High School diploma equivalency with 2 years of cumulative experience OR Associate’s degree/Bachelor’s degree OR 4 years of applicable cumulative job specific experience required., * 5+ years of experience in cloud infrastructure, cloud engineering, or cloud security, with demonstrated hands-on expertise securing enterprise Azure, GCP, and/or OCI environments.
• Extensive experience implementing, engineering, and operating a leading CNAPP solution (e.g., Wiz, Prisma Cloud, Orca Security, Microsoft Defender for Cloud, Upwind, or similar).
• Advanced knowledge of cloud networking, IAM, Kubernetes, containers, Infrastructure as Code (Terraform), CI/CD security, cloud logging, and cloud-native security services.
• Understanding of AI security concepts, including OWASP Top 10 for LLM Applications, AI-specific threats and risks, secure AI development lifecycle (AI SDLC), and governance for AI workloads.
• Relevant security certifications (CCSP or CISSP) are preferred.

• Comprehensive health coverage: medical, dental, vision, prescription coverage and HSA/FSA options
• Financial security & retirement: employer-matched 403(b), planning and hardship resources, disability and life insurance
• Time to recharge: pro-rated paid time off (PTO) and holidays
• Career growth: Ascension-paid tuition (Vocare), reimbursement, ongoing professional development and online learning
• Emotional well-being: Employee Assistance Program, counseling and peer support, spiritual care and stress management resources
• Family support: parental leave, adoption assistance and family benefits
• Other benefits: optional legal and pet insurance, transportation savings and more

Ascension is a leading nonprofit Catholic health system with a culture and associate experience grounded in service, growth, care and connection. We empower our 97,000+ associates to bring their skills and expertise every day to reimagining healthcare, together. Recognized as one of the Best 150+ Places to Work in Healthcare and a Military-Friendly Gold Employer, you’ll find an inclusive and supportive environment where your contributions truly matter.