Sr. Cloud Security Consultant

Job Title: Cloud Security Engineer / Senior Cloud Security Engineer

Location: Hybrid (Hybrid, with preference for candidates based in New Jersey)

Duration: 3–6 months

Extensive experience needed 5+ years in Cybersecurity, including 3+ years in Cloud Security

Position Summary

Client is seeking a Cloud Security Engineer to secure and modernize its AWS, Azure, GCP and SaaS environments. The role involves designing cloud security architecture, managing security platforms, protecting applications and data, and leading security initiatives for cloud migration and modernization.

Key Responsibilities

• Cloud Security & Architecture: Design secure multi-cloud and hybrid environments, implement Zero Trust, network segmentation, security guardrails, centralized traffic inspection and cloud governance.
• CNAPP, CSPM & SSPM: Own cloud and SaaS security posture platforms, onboard environments, tune policies, prioritize risks, automate findings and drive remediation within SLAs.
• SaaS & PaaS Security: Secure Salesforce, Workday, Microsoft 365, Atlassian and developer platforms; manage SSO, SCIM, MFA, OAuth, privileged access, integrations, data sharing and audit logging.
• Application & Infrastructure Security: Secure VMs, containers, Kubernetes (EKS, AKS, GKE) and serverless; integrate SAST, DAST, SCA, IaC scanning and secrets management into CI/CD; maintain hardened images and conduct threat modelling and API security reviews.
• Identity & Privileged Access: Enforce least-privilege IAM, JIT access, session brokering and PAM integration, partnering with IAM teams on tools such as CyberArk, AWS Systems Manager and Azure Bastion.
• Data Protection & Threat Management: Implement encryption, key management, DLP, CASB, data masking and security monitoring; support vulnerability management, incident response, forensics and compliance with HIPAA, SOC 2, PCI-DSS, ISO 27001, NIST and CIS.
• AWS Migration & Modernization: Lead security assessments for on-premises migration, design AWS landing zones and multi-account governance, and automate security controls using Terraform, CloudFormation or AWS CDK.
• Collaboration & Risk Management: Partner with Architecture, Engineering, DevOps, IAM, business application owners, Third-Party Risk and Procurement to assess risks, evaluate tools, document standards and enable secure technology adoption.

Required Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems or equivalent experience.
• 5+ years of cybersecurity experience, including 3+ years in cloud security.
• Hands-on AWS, Azure and GCP security experience, including cloud networking, IAM, Kubernetes, DevSecOps, IaC and cloud migration.
• Experience with CNAPP/CSPM, SaaS security, SSPM or CASB, identity federation, OAuth and third-party integrations.
• Strong knowledge of cloud-native security, risk assessments, security standards and technical documentation.
• Excellent communication, collaboration and ability to influence cross-functional teams.

Preferred Qualifications

• Experience with Wiz, Prisma Cloud, Orca or other commercial CNAPP platforms.
• Healthcare, healthcare payments or regulated-industry experience, including PHI and BAA requirements.
• Experience with PAM and just-in-time access models.
• Certifications such as CCSP, AWS Certified Security – Specialty or Azure Security Engineer Associate.

Thanks & Regards

Shekhar Das

[email protected]