Sr Cloud Security Engineer I (Remote)

American Specialty Health Incorporated is seeking a Senior Cloud Security Engineer I to join its Information Security department. The role focuses on architecting, implementing, and maintaining cloud security solutions, ensuring compliance with security policies and frameworks, monitoring cloud environments, and securing Microsoft Azure infrastructure, applications, containers, and automated compliance tools.

Responsibilities:

• Work closely with Cloud team to architect, implement and maintain security cloud solutions
• Implement, monitor, and support security software/systems that will help ensure compliance with HITRUST and CSA Cloud Controls Matrix in cloud environment
• Make recommendations to management on enhancements to existing and new security software or related tools
• Assist in evaluating, planning and implementation of new/existing security applications/tools that integrate with current tool sets
• Help implement and maintain next-generation enterprise control tools and detection technologies
• Ensure security standard methodologies are identified and integrated into all facets of projects including network, system designs/configuration, applications and implementations
• Identify and recommend potential areas where existing data security policies and procedures require change, or where a supplement is required to mitigate key security risks
• Partner with various business units to enhance security policies/procedures
• Create and maintain security documentation, policies, and procedures
• Direct hands-on experience designing and implementing security within Azure for both IaaS and PaaS offerings
• Performs other duties as assigned
• Complies with all policies and standards

Requirements:

• Bachelor's Degree or equivalent work experience required. If equivalent experience, High School Diploma required
• 5 years of enterprise cloud (IaaS, PaaS, SaaS) experience
• Experience with cloud security posture management (CSPM) and cloud workload protection (CWP) tools, such as Microsoft Defender for Cloud, AWS Security Hub / Config
• In-depth understanding of Azure Policy and/or AWS Service Control Policies
• Deep knowledge regarding cloud networking, such as routing, traffic filtering (firewalls), load balancing, etc
• Experience with cloud hosted container security
• Experience with DevOps and CI/CD tooling
• Experience in hardening AWS/Azure services
• Strong ability to critically think and solve problems
• Knowledgeable with CSA CCM security framework and CIS Benchmarks for Cloud
• Knowledge of host hardening, auditing, logging, monitoring, network security, and anomaly detections
• Understanding of industry trends for cybersecurity risk & threat intelligence, and governance
• Knowledgeable of Artificial Intelligence cloud architecture and establishing security guardrails
• Demonstrated ability to interact in a positive, respectful manner and establish and maintain cooperative working relationships
• Ability to display excellent customer service to meet the needs and expectations of both internal and external customers
• Excellent listening and interpersonal communication skills to identify critical core competencies based on success factors and organizational environment
• Ability to effectively organize, prioritize, multi-task and manage time
• Demonstrated accuracy and productivity in a changing environment with constant interruptions
• Demonstrated ability to analyze information, problems, issues, situations, and procedures to develop effective solutions
• Ability to exercise strict confidentiality in all matters
• IT cloud security experience
• Working experience with infrastructure as code (IaC) technologies such as Terraform or Azure Bicep (preferred)
• CCSP-Certified Career Services Provider Upon Hire
• AWS Certified Developer Upon Hire
• CSA - Certified System Admin Upon Hire
• Microsoft's Azure Solutions Architect Upon Hire