Principal Cloud Security Engineer
Role details
Job location
Tech stack
Job description
Principal Cloud Security Engineer who believes security should be delivered through engineering and automation rather than manual review processes. This role will focus on building secure cloud foundations, reusable infrastructure patterns, policy as code capabilities, and deployment controls that enable engineering teams to move quickly while maintaining strong security standards. This is a software engineering focused security role. The ideal candidate approaches security challenges by building durable technical controls and scalable solutions that become part of the engineering experience. Responsibilities:
- Design AWS multi-account organizational structures, account patterns, and security guardrails that make secure implementation the default path.
- Build, maintain, and enhance reusable Terraform modules and policy as code frameworks adopted across the enterprise.
- Implement preventive controls, service control policies, deployment validation, and cloud configuration monitoring for high-risk cloud activities.
- Improve logging integrity, CloudTrail architecture, telemetry pipelines, and monitoring capabilities to support security operations and detection engineering.
- Partner with Platform Engineering and Architecture teams on identity, networking, Kubernetes, Amazon Elastic Kubernetes Service, and serverless security patterns.
- Collaborate with Security Operations teams to transform cloud telemetry into actionable detections and security insights.
- Create design documentation, reference architectures, code examples, and implementation patterns that enable broad adoption across engineering teams.
- Participate in code reviews, design reviews, and architectural discussions with software and platform engineering teams.
- Serve as a key security engineering partner for infrastructure teams, architects, and engineering stakeholders across the organization.
- Contribute to both strategic security initiatives and operational cloud security responsibilities., * Terraform
- Go
- Python
- TypeScript
- C#
- Java
- Kubernetes
- Amazon Elastic Kubernetes Service
- CloudTrail
- Policy as Code Frameworks
- Git Based Development Workflows
- Continuous Integration and Continuous Delivery Platforms
- Identity and Access Management Technologies
- Security Monitoring and Detection Platforms
Requirements
- 8 or more years of experience in software engineering, platform engineering, site reliability engineering, cloud security, or related disciplines.
- Strong hands-on AWS experience supporting multi account cloud environments.
- Demonstrated software development experience in Go, Python, TypeScript, C#, or Java.
- Deep expertise with Terraform including reusable modules, testing practices, and enterprise scale infrastructure as code design.
- Experience implementing policy as code frameworks and preventive cloud security guardrails.
- Strong understanding of Amazon Elastic Kubernetes Service and serverless security practices.
- Experience building detective and preventive controls for cloud platforms and logging architectures.
- Ability to partner effectively with engineering teams through pull requests, design reviews, and collaborative software development processes.
- Experience working within continuous integration and continuous delivery environments.
- Strong communication and stakeholder management skills in customer facing environments.
- Ability to integrate within complex enterprise environments and build relationships across multiple technical teams. Preferred Qualifications
- Experience integrating cloud security data into security information and event management or extended detection and response platforms.
- Familiarity with Palo Alto Networks security products or Prisma Cloud.
- Experience enabling secure software delivery through developer focused security practices.
- Knowledge of securing artificial intelligence, generative artificial intelligence, internal copilots, or agent-based workflows in cloud environments.
Benefits & conditions
-
$92,000-147,000 per year Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we're helping build a sustainable economy wh…
-
17 hours ago