Security Engineer

LanceSoft, Inc. is a prominent staffing firm in the US, and they are seeking a Cloud Security Engineer to enhance their cloud security posture. The role involves developing secure cloud deployment patterns, modernizing Cloud Security Posture Management capabilities, and collaborating with various teams to mitigate cloud security risks.

Responsibilities:

• Define Secure Cloud Deployment Patterns: Develop and publish security standards and reference architectures for common cloud deployment patterns in GCP, Azure, and AWS. Build reusable Terraform modules and automation scripts to enable secure adoption by engineering teams
• Modernize CSPM Capabilities: Evaluate, test, and implement Cloud Security Posture Management (CSPM) solutions, with a strong focus on Wiz, and partner with key stakeholders to build an enterprise-ready CSPM environment across our public cloud footprint
• Policy-as-Code: Design, develop, test, and maintain enterprise Policy-as-Code libraries using Open Policy Agent (OPA) to enforce secure cloud deployment standards and automate compliance across cloud environments
• Collaborate with cloud engineering, infrastructure, and security teams to identify and remediate cloud security risks
• Develop scalable automation and security controls that improve cloud governance and reduce operational risk

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or related field (or equivalent experience)
• 5+ years of Cloud Engineering experience in enterprise environments
• Strong analytical and problem-solving skills with the ability to resolve complex technical issues independently
• Ability to understand existing cloud architectures and develop scalable remediation strategies while minimizing operational risk
• Strong communication and collaboration skills with experience working in Agile environments
• Demonstrated commitment to continuous learning and staying current with evolving cloud and security technologies
• Current Google Cloud Professional (GCP) Certification is required
• 5+ years of hands-on engineering experience supporting Google Cloud Platform (GCP)
• 3+ years of experience developing and maintaining production Terraform code in complex enterprise environments
• Proven experience writing, testing, and maintaining Policy-as-Code using Open Policy Agent (OPA) to enforce cloud security standards. Experience building reusable policy libraries is required
• Hands-on experience with Wiz for Cloud Security Posture Management (CSPM), including identifying, prioritizing, and remediating cloud security risks
• Strong scripting and automation experience using Python, Bash, or similar languages within CI/CD pipelines
• Experience designing secure cloud deployment patterns and infrastructure automation
• Strong understanding of cloud and on-premises networking, IAM, compute, storage, databases, and software-defined networking (SDN)
• Experience securing enterprise cloud environments and implementing cloud security best practices
• Experience supporting Azure and/or AWS environments
• Experience with GitHub, GitHub Actions, or Atlantis
• Combination of infrastructure engineering and cloud security experience
• Experience evaluating or implementing enterprise cloud security tooling and security automation frameworks