Manager, Cloud Security Engineering

Posted 3hrs ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Cloud security engineering manager leading AWS, Azure, and GCP security teams for Workstreet’s compliance-focused client engagements. Building hardened infrastructure, automation, and audit-ready controls.

Responsibilities:

  • Lead, manage, coach, and grow Cloud Security Engineers through expectations, feedback, performance reviews, and career paths
  • Build the interview process, recruit and select engineers, and onboard them
  • Plan capacity, assign engineers to engagements, track milestones and quality, and keep concurrent engagements on schedule
  • Serve as escalation point for technical and relationship issues
  • Lead client conversations with engineering leads and executives on scope, risk, and remediation priorities
  • Define and maintain reusable Terraform and CloudFormation baselines, landing zone patterns, IAM and logging modules, and code review practices
  • Review AWS multi-account, Azure Hub-Spoke, Landing Zone, IAM, network segmentation, and encryption architectures
  • Set the approach for AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud
  • Establish logging pipelines for SIEM ingestion
  • Establish guardrails and automated remediation workflows, including SAST, DAST, and secret scanning in GitHub Actions or Azure DevOps
  • Ensure technical controls satisfy SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP requirements
  • Ensure evidence supports audit readiness
  • Set escalation paths for cloud security incidents and ensure containment, diagnostics, and post-incident improvements
  • Coordinate with GRC delivery teams and provide technical input on scoping, statements of work, and new client opportunities
  • Track delivery health, remediation cycle times, and module reuse
  • Invest in tooling and automation
  • Participate in architecture reviews, complex remediations, and client workshops
  • Work with client engineering leads and executives during U.S. Eastern Time business hours

Requirements:

  • Experienced people manager who has hired, coached, and retained engineers
  • Deep, hands-on experience securing AWS, Azure, and GCP environments
  • Expertise in IAM strategy, including RBAC, ABAC, permission boundaries, and federated identity via Okta or Entra ID
  • Experience with network zoning, encryption, and logging
  • Fluency in Terraform
  • Working knowledge of CloudFormation, Python, or Bash
  • Ability to review module design, versioning, state management, and provider security controls
  • Experience mapping cloud configurations to SOC 2, ISO 27001, GDPR, and HIPAA requirements
  • Experience balancing multiple client portfolios and competing priorities in a fast-paced startup environment
  • Experience partnering with US-based technology founders, DevOps leads, and executive teams
  • Precise written and verbal English communication skills
  • Active certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA
  • Experience building or scaling a security engineering team in a consulting, MSSP, or hyper-growth technology environment
  • Experience with capacity planning and resourcing across client engagements
  • Hands-on experience with CMMC-compliant enclaves or FedRAMP security architectures, including NIST 800-53 and NIST 800-171 control implementation
  • Practical experience configuring and enforcing FIPS 140 standards across cloud services
  • Experience securing microservice architectures, Docker, and Kubernetes, including runtime security controls and vulnerability scanning
  • Direct experience with Zero Trust deployment models, identity-centric security policies, network micro-segmentation, and context-aware access
  • Advanced use of logging platforms, SIEM, vulnerability management engines, and threat hunting feeds
  • Excellent written and verbal English communication skills
  • Reliable, high-speed internet connection and professional home office environment
  • Availability for a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time
  • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities
  • Must participate in live video interviews with camera on and verify identity during recruitment and onboarding
  • Employment contingent upon identity verification and background screening, where permitted by law
  • Must be authorized to work in the U.S. without visa sponsorship now or in the future

Benefits:

  • Career development with mentorship and training opportunities
  • Reimbursement for approved role-relevant training and certification courses
  • Competitive base salary with regular performance reviews linked to merit-based appraisals
  • Bonus opportunities
  • Significant room for career advancement
  • Remote-first culture and flexibility to work from anywhere
  • Global team collaboration