Cloud Security Engineer

RESPONSIBILITIES:
Kforce has a client that is seeking a Cloud Security Engineer in Bolingbrook, IL.

Summary:
We are seeking a Cloud Security Engineer with hands-on experience securing cloud environments, with a strong emphasis on Google Cloud Platform (Google Cloud Platform). This is a hands-on engineering role focused on cloud security operations, identity and access management, security controls, and improving security posture across modern cloud environments. The ideal candidate has a solid foundation in cloud security and enjoys solving technical problems, working across engineering teams, and independently researching and resolving security challenges.

Duties:
* Support day-to-day cloud security operations within primarily Google Cloud Platform environments
* Manage Identity & Access Management (IAM) activities, including roles, permissions, access provisioning, and service accounts
* Implement and maintain cloud security controls, policies, and secure configuration standards
* Review cloud environments for security risks, vulnerabilities, misconfigurations, and access concerns
* Help secure cloud infrastructure, workloads, applications, containers, and data services
* Monitor and respond to cloud security findings, alerts, and vulnerabilities
* Support vulnerability remediation and security posture improvement initiatives
* Assist with cloud security incident investigation and root cause analysis
* Support security controls within CI/CD and DevSecOps workflows, including vulnerability scanning, secrets detection, and policy validation
* Partner with application, development, infrastructure, platform, and security teams to resolve security issues and support secure cloud adoption
* Contribute to security automation through scripting, Infrastructure as Code (IaC), and cloud-native tooling
* Support security assessments and compliance activities aligned with frameworks such as NIST and CIS

REQUIREMENTS:
* 3+ years of experience in cloud security, cybersecurity, cloud engineering, DevSecOps, or a related technical field
* Strong hands-on experience with Google Cloud Platform (Google Cloud Platform)
* Experience with Google Cloud Platform IAM, including roles, permissions, service accounts, and access management
* Experience supporting cloud security operations, including access requests, security findings, vulnerabilities, and remediation
* Familiarity with DevOps or DevSecOps environments and CI/CD processes
* Familiarity with security frameworks and controls such as NIST, CIS Benchmarks, PCI-DSS, or ISO 27001
* Understanding of cloud infrastructure, networking, identity, data protection, and workload security
* Understanding of security fundamentals including IAM, encryption, logging, vulnerability management, and threat detection
* Strong troubleshooting and problem-solving skills
* Strong communication skills with the ability to work effectively with both technical and business stakeholders
* Ability to work independently, research solutions, and take ownership of assigned security requests and issues

Nice to Have:
* Relevant cloud or security certifications such as Google Professional Cloud Security Engineer, AZ-500, Security+, or equivalent
* Experience with Azure security in addition to Google Cloud Platform
* Experience with cloud security posture management or CNAPP/CSPM technologies
* Experience with scripting or automation using Python, PowerShell, Bash, or similar technologies
* Experience with Infrastructure as Code and security automation
* Exposure to Kubernetes and container security
* Familiarity with application security practices such as SAST, DAST, dependency scanning, secrets detection, or software composition analysis

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.