Manager, Cloud Security Engineering.

Accountabilities:

• Lead, mentor, and develop a team of Cloud Security Engineers through regular coaching, performance reviews, career development plans, and clear technical expectations.

• Manage recruitment, selection, onboarding, and workforce planning to build a high-performing engineering team.

• Oversee delivery across multiple client engagements, including resource allocation, capacity planning, project milestones, technical quality, and delivery timelines.

• Act as the primary escalation point for technical challenges and client relationship matters, leading discussions with engineering leaders and executives.

• Establish and maintain engineering standards, reusable Terraform and CloudFormation modules, secure cloud landing zones, IAM configurations, and infrastructure-as-code practices.

• Guide cloud architecture decisions across AWS, Azure, and GCP, ensuring secure configurations covering identity management, network segmentation, encryption, monitoring, and logging.

• Oversee the implementation and optimization of native cloud security solutions, including AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud.

• Integrate security into development and deployment pipelines by implementing automated guardrails, remediation workflows, vulnerability scanning, and secret detection.

• Ensure technical cloud controls effectively address regulatory and security frameworks, including SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.

• Lead cloud security incident response processes, ensuring rapid containment, investigation, remediation, and continuous improvement.

• Collaborate with Governance, Risk, and Compliance (GRC) teams to align technical implementations with audit requirements, client objectives, project scopes, and new business opportunities.

• Monitor engineering delivery performance, remediation timelines, and infrastructure module reuse while identifying opportunities to improve automation and operational efficiency.

• Remain hands-on when needed by participating in architecture reviews, complex remediation projects, and client technical workshops.

Requirements:

• Significant experience managing, mentoring, and developing cloud security engineering teams, including recruitment, performance management, and team capacity planning.

• Deep hands-on expertise securing multi-cloud environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).

• Strong knowledge of cloud security architecture, including IAM strategies, RBAC, ABAC, federated identity, least-privilege access, network segmentation, encryption, and centralized logging.

• Advanced proficiency in Terraform and practical experience reviewing infrastructure-as-code modules, versioning, state management, and security configurations.

• Working knowledge of CloudFormation and scripting languages such as Python or Bash.

• Demonstrated experience translating regulatory and compliance frameworks into effective technical security controls, particularly SOC 2, ISO 27001, GDPR, and HIPAA.

• Experience implementing and managing cloud-native security tools, SIEM platforms, vulnerability management solutions, and threat detection capabilities.

• Strong understanding of DevSecOps practices, including SAST, DAST, secret scanning, automated remediation, and security integration into GitHub Actions or Azure DevOps.

• Proven ability to manage multiple client engagements simultaneously in a fast-paced consulting, MSSP, or high-growth technology environment.

• Experience advising clients, leading architectural workshops, managing escalations, and communicating technical risks to both engineering teams and executive stakeholders.

• Excellent written and verbal English communication skills, with strong problem-solving, decision-making, organizational, and interpersonal abilities.

• Ability to work remotely with a reliable high-speed internet connection and a professional home office environment.

• Availability to work a standard schedule of 8:00 AM to 5:00 PM U.S. Eastern Time and willingness to travel locally for occasional onsite meetings or team activities.

• Must be authorized to work in the United States without requiring current or future employment-based visa sponsorship.

Additional qualifications that would be advantageous:

• Relevant industry certifications, such as AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.

• Experience building or scaling security engineering teams in consulting, managed security services, or rapidly growing technology organizations.

• Hands-on experience with federal and regulated environments, particularly CMMC-compliant infrastructure, FedRAMP architectures, and NIST 800-53 or NIST 800-171 implementations.

• Practical experience implementing FIPS 140 encryption requirements across cloud services.

• Knowledge of container security, microservices, Docker, Kubernetes, runtime protection, and vulnerability scanning.

• Experience deploying Zero Trust architectures, identity-centric security policies, network micro-segmentation, and context-aware access controls.

• Advanced familiarity with SIEM platforms, security monitoring, vulnerability management, and threat-hunting technologies.

Benefits:

• Competitive compensation: Attractive base salary with regular performance reviews and merit-based salary progression.

• Performance incentives: Potential bonus opportunities linked to individual performance and contributions.

• Remote-first culture: Flexibility to work remotely while collaborating with an international team.

• Career development: Clear opportunities for professional growth, mentorship, and career advancement.

• Training support: Reimbursement for approved role-related training programs and successfully completed certification courses.

• Professional growth: Opportunity to build and shape a growing cloud security engineering practice within an early-stage company.

• Leadership opportunities: Direct responsibility for team development, technical strategy, and client delivery.

• Collaborative environment: Work alongside experienced security professionals on challenging projects across multiple industries.

Additional Employment Information

• Recruitment involves live video interviews with cameras enabled throughout the process.

• Candidates must be prepared to complete identity verification during recruitment and onboarding.

• Employment is conditional upon successful identity verification and background screening, where legally permitted.

• The selection process includes structured interviews with hiring managers and cross-functional stakeholders.

• Candidates can expect regular communication and updates throughout the recruitment process.

• Employment-based visa sponsorship or visa transfers are not available for this position.