Security Engineer, Cloud

About this role

Position Title: Security Engineer, Cloud


Position Location: Remote in the United States


Job Summary:
The Cloud Security Engineer is responsible for securing and improving the organization’s cloud environments, with a primary focus on Microsoft Azure. This role partners closely with platform, engineering, infrastructure, and Security Operations teams to implement cloud security governance, secure architecture patterns, identity and access controls, monitoring capabilities, and compliance-aligned security controls. The ideal candidate combines hands-on Azure security expertise with strong knowledge of cloud governance, landing zone architecture, and secure deployment practices to help create a cloud environment that is secure, scalable, and operationally sustainable by design.


Essential Functions:

• Design, implement, and maintain cloud security guardrails across Microsoft Azure environments, including subscription governance, resource organization, role-based access controls, and secure configuration baselines.
• Develop and support Azure landing zone architectures, including management group hierarchy, policy enforcement, governance standards, tagging strategies, and security controls that minimize organizational risk.
• Configure and maintain cloud security capabilities including encryption, secrets management, logging, monitoring, alerting, and secure remote administration solutions.
• Collaborate with platform, engineering, and infrastructure teams to conduct architecture reviews and implement secure cloud networking and hardening initiatives.
• Perform cloud security posture reviews to identify misconfigurations, excessive permissions, security gaps, and compliance drift within cloud environments.
• Support the investigation, detection, and remediation of cloud security incidents in partnership with Security Operations and infrastructure teams.
• Develop and maintain technical documentation and evidence demonstrating cloud ...