Overview
Skills
Job Details
Summary
We are seeking a Cloud Security Engineer to help secure our cloud network traffic. You will manage cloud-native network access controls across Azure and Google Cloud Platform utilizing Infrastructure as Code (IaC) automation through Terraform. The position requires effective use of Azure DevOps and GitHub to manage and deploy these configurations through streamlined CI/CD pipelines.
Required Qualifications
5+ years of professional experience as a Cloud Engineer with a strong understanding of both Azure and Google Cloud architecture and competencies.
5+ years of experience designing, implementing, and troubleshooting hierarchical perimeter security controls in Azure Firewall, Azure NSGs, and Google Cloud Firewall.
Extensive experience with IaC tools, specifically Terraform and Ansible, for automating cloud security tasks and ACLs at scale.
Strong background in using Azure DevOps and GitHub for code repository and version control within a CI/CD development lifecycle and DevSecOps.
Ability to script and automate security processes in cloud environments using Azure CLI, Azure PowerShell, gcloud, bash, etc.
Demonstrated ability to communicate complex security protocols clearly and train other team members for cross-functional support.
Excellent problem-solving skills and the ability to work under pressure, adapting to rapidly changing priorities in a fast-paced environment
Must be able to participate in 24/7 off-hours incident triage support, as needed.
Preferred Qualifications
Microsoft Azure Security Engineer Associate or related certifications.
Google Cloud Professional Cloud Security Engineer or related certifications.
Experience deploying, managing, securing, and troubleshooting Kubernetes in AKS and GKS.
Experience with Prisma Cloud Workload Protection, such as deploying, managing, updating Twistlock agents, and managing a secure environment through threat and vulnerability scanning at registry, build, and deployment stages.
Experience with security incident response and management.
Proficiency with additional security tools and platforms relevant to cloud security