# Cyber Cloud Security Engineer

**Company:** [Pierce Technology Corp](http://jobs.workable.com/companies/uJUrQDNSFkdZC8yNjwdWW6.md)
**Location:** New York, United States
**Workplace:** on site
**Employment type:** Full-time
**Department:** Pierce

[Apply for this job](http://jobs.workable.com/view/ad87ea24-eae3-4372-ac1f-82c7ada2e162)

## Description

**Multi-Cloud Security Leadership:** Built and managed comprehensive cloud security programs across AWS, Azure, and GCP, establishing baseline security standards, policies, and governance procedures.

**Secure Architecture & Zero Trust:** Designed, implemented, and validated secure cloud architectures applying Zero Trust principles across network, infrastructure, and identity access models.

**Vulnerability & Posture Management:** Leveraged CSPM tools (Wiz, AWS Security Hub) and automated remediation workflows to continuously detect, prioritize, and resolve cloud misconfigurations and vulnerabilities.

**Detection Engineering & Monitoring:** Developed automated continuous monitoring and alerting systems while partnering with the SOC to strengthen cloud detection engineering capabilities.

**Shift-Left Security & Cross-Team Collaboration:** Embedded security into the SDLC by partnering directly with Platform, DevOps, and Engineering teams to promote secure development practices and deliver shared security initiatives.

## Requirements

**AWS & Cloud Security Architecture:** 6–10 years of hands-on experience designing and securing AWS environments, backed by strong knowledge of native security tools (IAM, KMS, Config, GuardDuty, CloudTrail) and industry certifications (AWS Security/Architect, CISSP, CCSP).

**Identity & Access Management (IAM):** Proven expertise architecting cloud identity solutions, including SSO/federation (Okta), RBAC, ABAC, and robust service-to-service authentication models.

**Infrastructure as Code (IaC) & Automation:** Skilled in provisioning secure infrastructure via Terraform, AWS CDK, or CloudFormation, using Python and Bash to build custom security tooling and automated workflows.

**Container Security & DevOps:** Hands-on experience securing containerized workloads (Docker, Kubernetes, AWS EKS) integrated directly with modern CI/CD pipelines (GitLab CI, Jira).

**Governance, Compliance & Influence:** In-depth knowledge of translating frameworks (NIST CSF, CIS Benchmarks, ISO 27001, SOC 2) into cloud controls, with strong communication skills to influence stakeholders and drive security initiatives.