Cloud Security Specialist (Azure | AWS)

Role Summary

A senior-level Cloud Security Specialist is sought to enhance enterprise cloud security across a predominantly Microsoft Azure environment, with secondary responsibilities in AWS. This role involves designing, implementing, and maintaining cloud security controls, working closely with cross-functional teams to embed security best practices into cloud architecture and operations. The position requires a strategic thinker with strong technical expertise in cloud security, risk management, and compliance.

Responsibilities

• Lead the development and ongoing refinement of cloud security controls within Azure, supporting AWS security measures where applicable.
• Collaborate with engineering and platform teams to secure cloud-native architectures, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) solutions.
• Implement and manage identity and access management (IAM) controls, including Azure AD, Entra ID, roles, RBAC, and conditional access policies.
• Drive zero trust architecture principles through segmentation, least privilege access, and continuous verification processes.
• Oversee cloud security posture management (CSPM) using tools like Microsoft Defender for Cloud, Prisma, or Wiz.
• Conduct threat modeling, risk assessments, and vulnerability scans on cloud workloads to identify and mitigate security risks.
• Ensure compliance with enterprise security frameworks such as NIST, CIS benchmarks, and ISO 27001.
• Work with DevOps teams to incorporate security into CI/CD pipelines, Infrastructure as Code (IaC), and secrets management through DevSecOps practices.
• Serve as a trusted advisor to senior leadership on cloud-specific risk, security strategy, and technology roadmaps.
• Assist in incident response planning and mitigation for cloud-based security breaches and threats.

Qualifications

• 5 to 8+ years of experience in cloud security, cybersecurity, or security engineering.
• Extensive hands-on experience with Microsoft Azure security services, including network security groups, firewalls, Key Vault, Azure Policy, and Microsoft Defender for Cloud.
• Strong understanding of encryption, key management, and data protection standards.
• Expertise in network security architecture such as VNETs, segmentation, and private endpoints.
• Proven experience with identity and access management (IAM) in cloud environments.
• Demonstrated ability to implement security controls across hybrid and multi-cloud deployments, particularly in Azure with optional AWS experience.
• Knowledge of compliance and regulatory standards relevant to cloud security.
• Relevant cloud security certifications such as AZ-500 (Azure Security Engineer), AWS Certified Security – Specialty, CISSP, or CCSP.
• Ability to operate in a fast-paced environment, communicate effectively with technical and non-technical stakeholders, and maintain security best practices.

Publishing Pay Range: $50.00 - $60.00 USD Hourly

This is a fully remote role and can be performed from an approved location.