Multi-Cloud Security & Compliance Engineer

Latitude is a growing Service-Disabled Veteran Owned company serving federal-sector clients. The Multi-Cloud Security & Compliance Engineer will establish and enforce security across Google Cloud Platform and Oracle Cloud Infrastructure, manage identity and monitoring, and ensure cloud deployments comply with federal requirements. The role also identifies risks and drives remediation while supporting a cloud operations and migration team.

Responsibilities:

• Establish and enforce a unified security posture across GCP and OCI, including guardrails, standard configurations, and baseline security controls
• Manage identity federation between cloud environments and implement least-privilege IAM policies and role structures
• Configure and operate centralized security monitoring, such as GCP Security Command Center and OCI Cloud Guard, and integrate logs and alerts into enterprise monitoring
• Validate that cloud deployments meet FedRAMP High, FISMA, and NIST 800-53 requirements, working with governance and audit teams
• Identify vulnerabilities, policy deviations, and architectural risks, and drive remediation

Requirements:

• • Bachelor's degree in computer science, engineering, information systems, or a related technical field, or equivalent experience, and 5+ years of experience in cloud security engineering, enterprise security architecture, or compliance programs
• • 3+ years leading technical teams, including developing technical standards for cloud and on-premises environments and providing technical direction
• • Deep knowledge of GCP and OCI security services, IAM models, encryption, network security, and monitoring architecture
• • Hands-on experience configuring cloud security tools such as Security Command Center, IAM federation, logging pipelines, and vulnerability management
• • Experience with federal compliance frameworks such as NIST 800-53, FedRAMP, and FISMA, and with zero-trust architectures
• • A current security or SecOps certification from a major cloud provider (Google, Oracle, AWS, or Azure)
• • Ability to obtain and maintain a federal background investigation (Public Trust)
• • Applicants need to be a US Citizen to be considered for the position and have physically resided in the United States for a minimum of 3 years due to background investigation requirements
• • Active Public Trust
• • Experience supporting federal government programs, especially federal health
• • Experience with Assured Workloads landing zones and GCP VPC Service Controls
• • Container security for GKE environments
• • Translating CIS Benchmarks into automated cloud guardrails, and securing infrastructure-as-code and CI/CD pipelines
• • Database security and key management with OCI Data Safe, OCI Vault, and Cloud KMS
• • Threat hunting and vulnerability management using SIEM platforms and cloud-native scanning services