Position : Information Security Cloud Engineer (SME) – Project Engagement
Location : Durant OK-Must work onsite Monday & Tuesday (Remote Wednesday/Thursday/Friday)
Duration : 6 month Contract to HIRE
Contract W2 (No C2C)
Ideal candidate should live in border cities of Durant, OK.
OR these Texas Locations: Sherman, Texas/Denison, Texas/Tom Bean, Texas/Anna, Texas/Melissa, Texas/ Frisco, Texas/McKinney, Texas/Gainesville, Texas /Howe, Texas
Details :
Our Oklahoma-based client is seeking an experienced Information Security Cloud Engineer / Subject Matter Expert (SME) to lead the design, implementation, and operationalization of a comprehensive cloud security program.
This role will establish enterprise-wide cloud asset visibility, implement standardized cloud security controls, and integrate continuous monitoring capabilities into the broader information security program. The consultant will serve as a hands-on technical leader focused on reducing cloud security risk, improving governance, strengthening compliance readiness, and enabling long-term operational sustainability.
The ideal candidate brings deep expertise across cloud security architecture, governance, monitoring, risk management, and Oracle-centric enterprise environments.
Job Responsibilities
Cloud Security Assessment & Asset Visibility
- Assess cloud environments, configurations, security posture, and billing structures, providing recommendations aligned to industry best practices
- Identify, document, and maintain a comprehensive inventory of cloud assets including:
- Accounts, subscriptions, and tenants
- Compute, storage, database, and networking resources
- Identity objects, service principals, and managed identities
- Security tooling integrations and logging sources
- Define asset ownership, business purpose, data classification, and production/non-production tiers
- Implement automated discovery and reconciliation processes where feasible
- Align inventory management practices with enterprise configuration management standards
Security Baseline & Cloud Hardening
- Develop and implement cloud security baseline standards aligned with:
- Enterprise security policies
- Regulatory and compliance requirements
- Industry frameworks including NIST and CIS
- Establish and validate:
- Secure configuration standards
- Identity and access controls
- Logging, monitoring, and telemetry requirements
- Network segmentation and exposure controls
- Identify, prioritize, and remediate high-risk cloud misconfigurations
- Partner with Infrastructure, Engineering, Application, and Security teams to implement scalable and sustainable security controls
Continuous Monitoring & Detection
- Integrate cloud environments with approved security monitoring and SOC platforms
- Enable continuous monitoring for:
- Configuration drift
- Unauthorized or insecure deployments
- Risky user and identity activity
- High-risk assets and sensitive workloads
- Establish centralized logging, alerting, escalation criteria, and detection use cases
- Tune monitoring capabilities to reduce noise while maintaining effective risk coverage
Governance, Risk & Compliance
- Integrate cloud security findings into enterprise risk management and audit processes
- Define and report cloud security KPIs/KRIs including:
- Inventory accuracy and coverage
- Misconfiguration trends
- Remediation velocity
- Monitoring and detection effectiveness
- Produce documentation suitable for audit, regulatory, and executive review
- Support audits, tabletop exercises, and risk briefings as needed
Knowledge Transfer & Operational Sustainability
- Develop operational runbooks, standards, and procedures for cloud inventory management, secure deployment practices, and monitoring escalation
- Provide knowledge transfer and mentoring to Information Security, SOC, IT, and Engineering teams
- Dedicate scheduled time weekly to enhance internal cloud security knowledge and operational maturity
- Ensure the cloud security program is scalable and sustainable beyond the engagement
Deliverables
- Cloud asset inventory and ownership mapping
- Cloud environment security assessment
- Cloud security baseline standards and hardening documentation
- Risk-ranked remediation roadmap
- Monitoring architecture and SOC integration documentation
- Cloud security metrics and reporting framework
- Audit-ready documentation packages
- Operational runbooks and knowledge transfer materials
Success Criteria
The engagement will be considered successful when:
- A complete and accurate cloud asset inventory is established and maintained
- Cloud security baselines are implemented and enforced
- Continuous monitoring is operational and integrated into security workflows
- Cloud security risks are measurable, reportable, and actionable at the executive level
- Internal teams are equipped to sustain cloud security operations after the engagement
Job Qualifications
- 7+ years of experience in Information Security, Cloud Security, or Security Engineering roles
- Strong expertise securing enterprise cloud environments across Azure, AWS, Google Cloud Platform, and/or Oracle Cloud Infrastructure (OCI)
- Experience implementing cloud security controls including IAM, network segmentation, secure configuration standards, logging/telemetry, vulnerability management, and continuous monitoring
- Proven ability to establish cloud asset visibility, security baselines, remediation programs, and SOC/SIEM integrations
- Experience securing Oracle environments including OCI, Oracle ERP/HCM platforms, Oracle databases, and related identity/access controls
- Strong understanding of NIST, CIS, Zero Trust, risk management, and audit/compliance frameworks
- Ability to work cross-functionally with Infrastructure, Engineering, Security Operations, and Application teams
- Strong communication, documentation, and stakeholder management skills
- Hands-on technical expertise with the ability to balance strategic guidance and tactical execution
Preferred Certifications
CISSP, CCSP, CISM, GIAC Cloud Security, Azure Security Engineer, AWS Security Specialty, or equivalent cloud/security certifications preferred.
Never miss an opportunity! Create an alert based on the job you applied for.
