Cloud Security Engineer

Tyler Technologies is seeking an experienced Cloud Security Engineer to support their Data and Insights solutions within the Security team. The role involves shaping the security posture of the D&I cloud platform and ensuring secure, compliant, and resilient cloud services.

Responsibilities:

• Own cloud security architecture and technical controls across AWS environments
• Designing and operating scalable, auditable safeguards that support FedRAMP, CJIS, HIPAA, and GDPR workloads
• Execute and sustain FedRAMP Moderate technical requirements in production
• Partnering with Product Security and GRC peers to maintain control effectiveness, remediate findings, and support ongoing authorization activities
• Build and enforce automated cloud security guardrails
• Establishing configuration baselines, policy enforcement, and drift detection to prevent non-compliant infrastructure changes
• Secure AWS network boundaries and regulated data flows
• Ensuring segmentation, ingress and egress controls, and inspection patterns meet regulatory and organizational security requirements
• Support cryptographic and platform security standards
• Ensuring encryption, key management, and platform configurations align with regulatory expectations and industry best practices
• Lead security readiness for significant architectural change
• Performing technical security impact analysis for new services, infrastructure changes, and boundary expansions before production deployment
• Integrate cloud security telemetry into detection and response workflows
• Ensuring logging and security signals support continuous monitoring, investigations, and audit evidence needs
• Embed cloud security into infrastructure and delivery workflows
• Collaborating with Infrastructure Engineering to integrate security controls into infrastructure-as-code and CI/CD processes
• Apply cloud security controls across multi-regulatory environments
• Supporting CJIS, HIPAA, and GDPR workloads while reducing one-off solutions and improving consistency
• Contribute to cloud security strategy and maturity
• Helping define the D&I cloud security roadmap, identifying opportunities for automation, and evolving security practices over time

Requirements:

• Accountable and Self-Directed. Owns work end-to-end, makes sound decisions with limited direction, and accepts responsibility for outcomes in regulated cloud environments
• Strong Judgment and Decision-Making. Evaluates risk thoughtfully, anticipates downstream impacts, and balances security, compliance, and delivery realities
• Clear and Credible Communicator. Explains complex cloud security and compliance topics clearly to engineers, auditors, customers, and non-technical stakeholders; documents decisions and evidence with precision
• Highly Organized and Reliable. Manages multiple concurrent efforts, meets deadlines consistently, and produces accurate, audit-ready work products
• Resilient and Adaptable. Able to manage shifting priorities, audit pressure, and evolving regulatory requirements without sacrificing quality or professionalism
• Detail-Oriented with Systems Thinking. Understands how individual cloud or configuration decisions affect broader platform risk, compliance posture, and customer trust
• Pragmatic and Solutions-Focused. Seeks practical, sustainable security outcomes rather than theoretical perfection; knows how to move work forward within constraints
• Collaborative and Team-Oriented. Works effectively across security, infrastructure, engineering, and compliance teams; contributes to shared goals without seeking credit
• Open to Feedback and Continuous Improvement. Actively seeks input, learns from experience, and continuously develops skills aligned with role expectations and organizational goals
• AWS cloud security and infrastructure services, including IAM, VPC networking, Security Groups/NACLs, CloudTrail, GuardDuty, AWS Config, Security Hub, KMS, and CloudWatch
• Infrastructure as Code (IaC) using tools such as Terraform or CloudFormation, with an emphasis on secure, repeatable deployments and configuration baselines
• Linux-based operating systems (e.g., Amazon Linux, Ubuntu) with strong command-line proficiency and an understanding of OS-level hardening
• Network security fundamentals, including segmentation, private connectivity patterns, ingress/egress controls, and secure service-to-service communication
• Cloud-native security monitoring and logging, including centralized log aggregation, alerting, investigation, and correlation across infrastructure and security telemetry
• Vulnerability and cloud security posture management, including misconfiguration detection, risk prioritization, and remediation tracking in cloud environments
• Security automation and scripting, using languages such as Python or Bash to validate configurations, collect compliance evidence, and reduce manual effort
• Secure CI/CD and engineering collaboration practices, including integrating security checks into pipelines and reviewing infrastructure, configuration, and policy changes via pull requests in GitHub
• Experience securing containerized workloads in AWS, including an understanding of ECS and Fargate security models, task and execution IAM roles, networking and isolation boundaries, logging, and shared responsibility considerations
• Experience working with modern cloud security tooling, including infrastructure and cloud-focused code scanning, cloud security posture management, endpoint and workload telemetry, and centralized log analysis platforms(e.g., GitHub Advanced Security, Tenable Cloud Security, CrowdStrike, Sumo Logic; familiarity with tools such as Nessus, AquaSec, Invicti, and CI/CD platforms like Jenkins or GitHub Actions is a plus)
• Working knowledge of NIST-based security frameworks, particularly NIST SP 800-53, with the ability to map technical implementations to control intent and audit evidence
• Experience supporting compliance-driven environments, such as FedRAMP Moderate, CJIS, HIPAA, SOC 2, or similar regulated frameworks
• Identity, access, and cryptography fundamentals, including least privilege, service roles, federated access, MFA enforcement, encryption in transit and at rest, certificate management, and FIPS-aligned cryptographic practices
• Ability to pass a federal background check and obtain and maintain CJIS clearance required
• Bachelor's degree in Computer Science, Engineering, Mathematics, Information Systems, or a related field preferred
• Valued Certifications: AWS Security Specialty, AWS Solutions Architect, CompTIA Security+, CISSP