Cloud Security Engineering Specialist

Ascension is a nonprofit Catholic health system seeking a Cloud Security Engineering Specialist to secure enterprise multi-cloud environments. The role focuses on cloud security architecture, CNAPP and cloud risk management, threat detection and automation, AI security governance, and technical leadership.

Responsibilities:

• Cloud Security Engineering: Design, implement, and continuously improve security across enterprise multi-cloud environments (Azure, GCP, and OCI) by developing secure landing zones, cloud security architectures, identity controls, Infrastructure as Code (Terraform) guardrails, and Kubernetes/container security capabilities
• CNAPP & Cloud Risk Management: Engineer and optimize Cloud-Native Application Protection Platform (CNAPP) capabilities. Drive vulnerability prioritization, remediation strategies, configuration drift detection, and continuous compliance across cloud environments
• Threat Detection & Security Automation: Develop automated security controls, policy enforcement, and remediation workflows to improve cloud visibility, operational efficiency, and secure-by-default deployments
• AI Security & Governance: Partner with AI Security, AI Engineering, and Cloud Engineering teams to assess AI technologies and workloads, prioritize and mitigate AI-related risks, develop cloud and AI security standards and technical controls, and support the secure AI development lifecycle (AI SDLC)
• Technical Leadership & Security Standards: Develop cloud security standards, perform design reviews and threat modeling, evaluate emerging technologies, and mentor team members through technical guidance, knowledge sharing, and hands-on coaching

Requirements:

• High School diploma equivalency with 2 years of cumulative experience OR Associate's degree/Bachelor's degree OR 4 years of applicable cumulative job specific experience required
• 5+ years of experience in cloud infrastructure, cloud engineering, or cloud security, with demonstrated hands-on expertise securing enterprise Azure, GCP, and/or OCI environments
• Extensive experience implementing, engineering, and operating a leading CNAPP solution (e.g., Wiz, Prisma Cloud, Orca Security, Microsoft Defender for Cloud, Upwind, or similar)
• Advanced knowledge of cloud networking, IAM, Kubernetes, containers, Infrastructure as Code (Terraform), CI/CD security, cloud logging, and cloud-native security services
• Understanding of AI security concepts, including OWASP Top 10 for LLM Applications, AI-specific threats and risks, secure AI development lifecycle (AI SDLC), and governance for AI workloads
• Relevant security certifications (CCSP or CISSP) are preferred