> Markdown version of [/jobs/ext/3893187-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/3893187-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cloud Security Engineer - **Company:** Randstad - **Location:** Sacramento, CA, United States - **Experience:** Expert - **Salary:** $122,000.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Disaster Recovery, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Network Security, PCI Data Security Standards, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Cloud Services, Security Information and Event Management, Software Engineering, Systems Architecture, Software Vulnerability Management, Google Cloud, Cloud Platform System, Multi-Cloud, Azure Security Center, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, Cloud Migration, Vulnerability Analysis - **Published:** October 23, 2026 - **Apply:** https://www.dice.com/job-detail/74456e04-3b60-4edf-858f-371e40400450 ## About the Role o 10+ years in progressive cybersecurity/information security roles, featuring hands-on expertise securing enterprise infrastructure and Azure cloud environments. o 5+ years of direct technical experience across AWS, Google Cloud Platform, and Azure cloud platforms. - Technical Proficiency: o Demonstrated background in cloud security controls, IAM framework design, endpoint security, device compliance, SIEM, EDR, and CSPM solutions. o Practical experience with automation and scripting languages (such as PowerShell or Python). o Hands-on involvement in cloud migration initiatives, vulnerability assessment, threat detection, and incident remediation. - Regulatory Knowledge: Direct experience operating security programs aligned with standards like NIST CSF, ISO 27001, PCI DSS, and CCPA. - Soft Skills: Exceptional analytical and problem-solving skills; proven track record of converting risk findings into actionable operational guidance; collaborative mindset with strong cross-functional communication abilities. - Education: o High School Diploma or GED required. o Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related discipline (or equivalent practical experience) preferred. skills: AWS,AWS Security,Azure AD,Azure Security Center,Cloud,cloud security,cloud security posture,cloud environments,cloud systems,native cloud,disaster recovery,Google Cloud Platform,Azure,NIST CSF,PCI DSS,RBAC,least privilege,SIEM,vulnerability management,access controls,Conditional Access,architecture,business continuity planning,data protection,project delivery,secure configurations,ISO 27001,incident reviews,incident response activities,infrastructure,metrics,risk remediation,organizational goals,ensure compliance,regulatory frameworks,investigation,risks,security,security audits,security controls,deployment processes,system design,telemetry,threat modeling ## Description * Cloud Safeguards & Governance: Architect, deploy, and administer security measures across multi-cloud infrastructure (AWS, Azure, Google Cloud Platform). Enforce proper configurations, manage access policies, and establish cloud security baselines, guardrails, and compliance standards (including CSPM, network security, identity management, and data protection). * Cloud Transformation: Embed proactive security controls into system architecture, migration pipelines, and deployment frameworks to facilitate safe transitions from legacy on-premise setups to cloud ecosystems. * Security Administration & Tooling: Oversee cloud-native security utilities (such as AWS Security Hub, Azure Security Center / Defender for Cloud, and related platform tools). * Subject Matter Expertise & Advisory: Function as the primary technical advisor for cybersecurity. Conduct design evaluations, lead threat modeling, perform security validations, and partner across software engineering, IT, and data teams to incorporate security early in the project lifecycle. * Identity & Access Management (IAM): Configure and maintain robust identity controls using Azure Active Directory and modern access solutions (enforcing least-privilege principles, Role-Based Access Control, and Conditional Access policies) across enterprise and cloud landscapes. * Threat Detection & Incident Handling: Utilize SIEM tools and cloud telemetry to enhance threat monitoring and detection capabilities. Lead containment, root-cause investigations, and post-incident analysis during security events. * Automation & Process Improvement: Streamline security monitoring, alerting, and incident response operations by creating automated workflows and scripts (e.g., Python, PowerShell). * Metrics, Risk & Compliance: Define and monitor key performance indicators to assess overall posture. Assist with security audits and maintain alignment with industry benchmarks and regulatory mandates (e.g., NIST CSF, ISO 27001, PCI-DSS, CCPA). * Risk Mitigation & Remediation: Contribute to vulnerability management programs, enterprise risk reduction efforts, and disaster recovery / business continuity planning for cloud services. * Documentation & Leadership: Draft and maintain cloud security guidelines, standard operating procedures, and technical documentation while staying current on emerging threats and industry trends.