Cloud Security Engineer

Job Title: Cloud Security Engineer

Location: Austin, TX (Onsite – 4–5 days per week)

Work Arrangement:

This position is primarily onsite, requiring the contractor to work on location in Austin, TX four to five days per week. Candidates must be local to the Austin area.

The Texas Department of Transportation (TxDOT) is seeking an experienced Cloud Security Engineer to support its Tools Team. This role focuses on implementing, maintaining, and enhancing TxDOT’s Cloud Security Monitoring platform while ensuring secure, compliant cloud environments across multiple cloud providers. The ideal candidate will bring strong hands-on cloud security experience, automation skills, and a deep understanding of risk management, incident response, and DevSecOps practices.

Key Responsibilities:

·         Cloud Security Monitoring & Operations

·         Maintain and support TxDOT’s Cloud Security Monitoring tool.

·         Monitor cloud environments for security risks, vulnerabilities, and compliance gaps.

·         Respond to and support cloud security incidents and investigations.

·         Cloud Security Architecture & Automation

·         Design, develop, and implement automated security controls and guardrails across Google Cloud Platform (Google Cloud Platform) environments.

·         Support secure cloud architecture across Google Cloud Platform, AWS, and Azure.

·         Integrate security into CI/CD pipelines and DevSecOps workflows.

·         Compliance, Risk & Governance

·         Conduct cloud risk assessments and vulnerability management activities.

·         Maintain compliance with internal security policies and external regulatory frameworks.

·         Support audits, remediation efforts, and continuous security monitoring initiatives.

Required Skills & Experience:

·         8+ years of experience designing and managing cloud environments across Google Cloud Platform, AWS, and Azure.

·         Deep expertise in cloud security fundamentals, including:

·         Risk assessments

·         Vulnerability management

·         Incident response

·         Container security

·         DevSecOps practices

·         Hands-on experience with cloud security monitoring tools such as:

·         WIZ

·         Microsoft Defender for Cloud

·         Tenable (or similar tools)

·         Strong troubleshooting, analytical, and communication skills.

Preferred / Nice-to-Have Skills:

·         Prior experience designing and managing cloud environments for a Texas State Agency.

·         Google Professional Cloud Security Engineer certification.

·         Hands-on experience with Google Cloud Platform security services and tools, including:

·         Cloud KMS

·         Cloud Armor

·         Security Command Center (SCC)

·         Google Kubernetes Engine (GKE)

·         Data Loss Prevention (DLP)

Chronicle