We have an immediate need for a Cloud Security Engineer role at a direct client of ours.

This person will be working with Cloud computing and performance security architecture.

Consultant will develop automated security and compliance capabilities in support of DevSecOps processes in an enterprise cloud computing environment. And will be responsible for executing the the cloud security strategy and roadmap.

Location: Hybrid role

Duration: 6 months Contract to hire role

Responsible for:

• Leverage DevSecOps tools to build, harden, maintain and instrument a comprehensive cloud-based security orchestration platform to be consumed in product CI/CD pipelines.
• Represents Security Platform in development and implementation of the overall global enterprise cloud architecture
• Participate in and reviews risk assessments to ensure compliance with Security Architecture objectives and standards.
• Works with IT and OT Infrastructure Services, and Application Development organizations to choose appropriate technology.
• Design and implement Cloud-native architectures that will allow business requirements to be met with a minimal degree of risk to the organization.

The ideal candidate will have the following qualifications:

• 10 years of combined experience / understanding in cyber security, risk management, code reviews, application security, microservices, etc
• 8 years of experience in Security engineering, with at least 2 years in Cloud computing
• Proficiency in at least one scripting language
• Identify and implement security controls for Cloud environments
• API life-cycle management and message bus technologies
• Reviews network architecture diagrams for various attack vectors and provides expert advice on mitigating threats via proper architecture design.
• Focuses on cloud-based solutions that work in an existing hybrid cloud/on premise environment.
• Understands and is capable of working within DevSecOps model, embracing guardrail model of security to support rapid development in an Agile framework
• Defines strategy and architecture for security solutions that protect company infrastructure and data, while incorporating applicable compliance standards.
• Experienced in multiple platforms, including Windows, Linux, Active Directory, Unix, Network, Cloud, and End User/Mobile devices.
• Ability to present to all levels of management & executive leadership
• CISSP or Security certifications highly preferred and will be considered at an advantage