Principal Cloud Security Engineer

Job Summary

Providing technical leadership for cloud security, the full-time remote Principal Cloud Security Engineer will design and implement security posture management, policy-as-code guardrails, and automated controls to protect cloud environments and ensure secure product development.

Key responsibilities

• Lead the architecture and evolution of cloud security posture management across a multi-subscription estate, prioritizing remediation efforts
• Design and implement policy-as-code preventive guardrails to block non-compliant infrastructure before production deployment
• Own the security architecture for cloud landing zones, ensuring new environments inherit security baselines and logging by default

Required qualifications

• 12+ years of experience in cloud security, security engineering, or application security
• Extensive experience with AWS and Azure security controls and CNAPP/CSPM platforms
• Advanced proficiency in policy-as-code practices and infrastructure-as-code validation within CI/CD pipelines
• Strong understanding of cloud network security and automated remediation processes
• Experience in leading cross-functional teams and mentoring engineers in security best practices