Manager, Cloud Security Engineer

Responsibilities

Lead and develop a team of Cloud Security Engineers to design, build, and operate secure cloud environments for clients. Manage client portfolios, set engineering standards, and serve as the primary escalation point for technical and relationship issues.

Requirements

Requires deep hands-on experience in multi-cloud security, infrastructure as code, and GRC strategy. Candidates must be experienced people managers with strong communication skills and the ability to work during U.S. Eastern Time business hours.

Skills

• Cloud security
• AWS
• Azure
• GCP
• Terraform
• People management
• GRC
• IAM
• Infrastructure as code
• Security architecture
• Incident response
• DevSecOps
• Compliance frameworks
• Leadership
• Communication
• Mentoring

Benefits

• Career development
• Mentorship
• Training opportunities
• Role-related training reimbursement
• Competitive compensation
• Performance bonuses
• Remote-first culture

About this role

Get to Know the Security Services Team
We are the team that turns complex security requirements and compliance frameworks into infrastructure and services that actually work. Moving fast and taking true end-to-end ownership, our Cloud Security Engineering team designs hardened AWS, Azure, and GCP environments, writes Terraform baselines, and fixes failing controls to meet frameworks like SOC 2, ISO 27001, CMMC, and FedRAMP. We do not hide behind process or just point out gaps. We step in, build solutions, and deliver real security posture improvements with minimal disruption.
What makes this team special isn’t just our technical depth; it is how we back each other up. Our strongest engineers are the ones building reusable modules, writing custom tools, jumping into channels to unblock teammates, and mentoring without being asked. From early-stage startups to regulated enterprises, you will work directly with clients, take on real ownership early, and be surrounded by people who want to see you get good. If you enjoy solving tough security problems and want to be part of a team that is scrappy enough to move fast but seasoned enough to get it right, you will be in good company here.
The Opportunity
Workstreet is seeking a Manager, Cloud Security Engineering to lead a team of Cloud Security Engineers who design, build, and operate cloud security controls for our clients across AWS, Azure, and GCP. This is a player-coach leadership role for someone who has built hardened cloud environments themselves and now wants to multiply that impact through a team.
You will own the quality, capacity, and consistency of Cloud Security Engineering delivery: hiring and developing engineers, staffing and overseeing client engagements, setting engineering standards, and serving as the escalation point for technical and relationship issues. You will stay close enough to the work to review architecture, unblock engineers, and step into client conversations when it matters, while working alongside the GRC delivery teams to deliver outcomes that hold up in front of auditors and adversaries alike.
You will work with client engineering leads and executives during U.S. Eastern Time business hours, and you will be accountable for ensuring that every client environment achieves drift-resistant, code-defined security rather than documentation-only compliance.
What You’ll Do
● Lead and develop the team: manage, coach, and grow Cloud Security Engineers through clear expectations, regular feedback, performance reviews, and defined career paths.
● Hire and onboard: build the interview process, recruit and select engineers, and onboard them so they take direct ownership of client work quickly.
● Own delivery across the client portfolio: plan capacity, assign engineers to engagements, track milestones and quality, and make sure multiple concurrent engagements stay on schedule without sacrificing technical rigor.
● Serve as the escalation point: handle technical and relationship escalations calmly, and lead conversations with client engineering leads and executives on scope, risk, and remediation priorities.
● Set engineering standards: define and maintain reusable Terraform and CloudFormation baselines, landing zone patterns, IAM and logging modules, and code review practices that make client environments drift-resistant.
● Guide cloud architecture decisions: review designs for AWS multi-account structures, Azure Hub-Spoke and Landing Zone architectures, least-privilege IAM, network segmentation, and encryption using services such as AWS KMS and Azure Key Vault.
● Direct native security tooling: set the approach for deploying and tuning AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud, including logging pipelines for SIEM ingestion.
● Embed security in delivery pipelines: establish guardrails and automated remediation workflows, including SAST, DAST, and secret scanning in GitHub Actions or Azure DevOps.
● Translate frameworks into functional controls: ensure technical controls satisfy SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP requirements in practice, not only on a compliance map, and that evidence supports audit readiness.
● Oversee incident response: set the escalation path for cloud security incidents and ensure rapid containment, diagnostics, and post-incident improvements.
● Collaborate across Security Services and GRC: coordinate with GRC delivery teams, and provide technical input on scoping, statements of work, and new client opportunities.
● Continuously improve the practice: track delivery health, remediation cycle times, and module reuse, and invest in tooling and automation that removes repetitive work for the team.
● Stay hands-on where it counts: step into architecture reviews, complex remediations, and client workshops to unblock engineers and maintain technical credibility.

Who You Are
● Technical leader of cloud security engineers: experienced people manager who has hired, coached, and retained engineers, and who sets a high bar for work quality while backing the team under pressure.
● Multi-cloud security expert: deep, hands-on background securing AWS, Azure, and GCP environments, including IAM strategy (RBAC, ABAC, permission boundaries, federated identity via Okta or Entra ID), network zoning, encryption, and logging.
● Infrastructure as Code authority: fluent in Terraform, with working knowledge of CloudFormation, Python, or Bash, and able to review module design, versioning, state management, and provider security controls.
● GRC infrastructure strategist: maps technical cloud configurations to SOC 2, ISO 27001, GDPR, and HIPAA requirements, and distinguishes compliance mappings from functional technical controls.
● Delivery operator: thrives in a fast-paced startup environment, balancing multiple client portfolios and competing priorities while keeping the team focused on rapid, well-governed remediation.
● Trusted client advisor:...

About Workstreet

Computer and Network Security · 51-200 employees · headquartered in San Francisco , CA · founded 2023