Senior Engineer, Cloud Security

🔥 14 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

☁️ Cloud Engineer

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Workstreet

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2023

🔒 Cybersecurity

📋 Compliance

🤝 B2B

Cybersecurity • Compliance • B2B

Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.

📋 Description

• Design and maintain reusable Terraform and CloudFormation modules for IAM, networking, and logging. • Deploy and manage AWS multi-account structures, including Organizations and SCPs. • Build Azure Hub-Spoke and Landing Zone architectures. • Implement least-privilege IAM using RBAC, ABAC, permission boundaries, JIT/PIM automation, and federated identity via Okta or Entra ID. • Remediate cloud misconfigurations through engineering changes, automated patching, and configuration drift correction. • Build automated remediation workflows using Lambda, Azure Functions, and Python. • Integrate SAST, DAST, and secret scanning into GitHub Actions or Azure DevOps pipelines. • Deploy and tune AWS GuardDuty, Security Hub, AWS Config, Azure Sentinel, and Defender for Cloud. • Build native logging pipelines for SIEM ingestion. • Design VPCs, security groups, network segmentation, WAFs, and full-lifecycle encryption using AWS KMS and Azure Key Vault. • Translate NIST 800-53, FedRAMP, and CMMC criteria into technical controls across cloud environments. • Interface directly with client engineering teams and lead architectural workshops. • Manage multiple client engagements simultaneously. • Take direct ownership of cloud security engineering tasks, vulnerability remediation, and client engagements within the first 15 days.

🎯 Requirements

• Deep technical expertise in cloud infrastructure engineering, with strong emphasis on Azure and multi-cloud architectures. • Proven track record deploying security infrastructure, writing OPA policies, and managing secrets in Vault or AWS Secrets Manager. • Deep expertise in Azure and AWS. • Proficiency in Terraform, including module versioning, state management, and provider security controls. • Deep technical understanding of SAML, OIDC, cross-account IAM roles, and least-privilege enforcement. • Ability to lead technical workshops and explain complex architecture to engineering teams. • Ability to balance multiple client priorities and execute rapid remediation. • Technical cloud security certification such as AWS Certified Security Specialty, Azure Security Engineer Associate, or GCP Professional Security Engineer. • Practical experience configuring and enforcing FIPS 140 standards across cloud services. • Hands-on experience building CMMC-compliant enclaves or FedRAMP security architectures. • Experience implementing runtime security controls and vulnerability scanning across containerized environments. • Excellent written and verbal English communication skills. • Reliable, high-speed internet connection and professional home office environment supporting confidential conversations and uninterrupted collaboration. • Ability to work 8:00 AM–5:00 PM US Eastern Time, with occasional flexibility. • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities. • Must participate in live video interviews with camera on and verify identity during recruitment and onboarding. • Employment contingent on identity verification and background screening, where permitted by law. • Must be authorized to work in the U.S. without visa sponsorship now or in the future.

🏖️ Benefits

• Career Development: Clear path with mentorship and training opportunities. • Reimbursement for successful completion of approved training and certification courses relevant to the current role. • Competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities. • Significant room for career advancement. • Remote-first culture with flexibility to work from anywhere while collaborating with a global team.