Senior Engineer, Cloud Security

🔥 52 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

☁️ Cloud Engineer

👻 Ghost score 20%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Workstreet

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2023

🔒 Cybersecurity

📋 Compliance

🤝 B2B

Cybersecurity • Compliance • B2B

Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.

📋 Description

• Design and maintain reusable Terraform and CloudFormation modules for IAM, networking, and logging • Deploy and manage AWS multi-account structures, including Organizations and SCPs • Build Azure Hub-Spoke and Landing Zone architectures • Implement least-privilege IAM using RBAC, ABAC, permission boundaries, JIT or PIM automation, and federated identity via Okta or Entra ID • Remediate cloud misconfigurations through engineering changes, automated patching, and configuration drift correction • Build automated remediation workflows using Lambda, Azure Functions, and Python • Integrate SAST, DAST, and secret scanning into GitHub Actions or Azure DevOps pipelines • Deploy and tune AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud • Build native logging pipelines for SIEM ingestion • Design VPCs, security groups, network segmentation, WAFs, and full-lifecycle encryption using AWS KMS and Azure Key Vault • Translate NIST 800-53, FedRAMP, and CMMC criteria into technical controls across cloud environments • Interface directly with client engineering teams and lead architectural workshops • Manage multiple client engagements simultaneously • Take direct ownership of cloud security engineering tasks, vulnerability remediation, and client engagements within the first 15 days • Work with client engineering leads during U.S. Eastern Time business hours and execute automated security operations

🎯 Requirements

• Deep technical expertise in cloud infrastructure engineering, with strong emphasis on Azure and multi-cloud architectures • Proven track record of deploying security infrastructure, writing OPA policies, and managing secrets in Vault or AWS Secrets Manager • Deep expertise in Azure and AWS • Proficiency in Terraform, including module versioning, state management, and provider security controls • Deep understanding of SAML, OIDC, cross-account IAM roles, and least-privilege enforcement • Ability to lead technical workshops and explain complex architectures to engineering teams • Ability to balance multiple client priorities and execute rapid remediation in a fast-paced startup environment • Technical cloud security certification such as AWS Certified Security Specialty, Azure Security Engineer Associate, or GCP Professional Security Engineer • Practical experience configuring and enforcing FIPS 140 standards across cloud services • Hands-on experience building CMMC-compliant enclaves or FedRAMP security architectures • Experience implementing container runtime security controls and vulnerability scanning • Excellent written and verbal English communication skills • Reliable, high-speed internet connection and professional home office environment • Availability for a standard schedule of 8:00 AM–5:00 PM US Eastern Time, with occasional flexibility • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities • Participation in live video interviews with camera on and identity verification during recruitment and onboarding • Successful identity verification and background screening, where permitted by law • Authorization to work in the U.S. without current or future visa sponsorship

🏖️ Benefits

• Career development with mentorship and training opportunities • Reimbursement for approved training and certification courses relevant to the current role • Competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities • Significant room for career advancement • Remote-first culture with flexibility to work from anywhere while collaborating with a global team

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume