Cloud Architect

Senior Cloud Security Engineer (Wiz, Terraform & GitLab)Need expertise in Terraform12-Month Staff Augmentation ContractOverviewOur client, a large financial services organization, is seeking a Senior Cloud Security Engineer to support a strategic migration from Palo Alto Prisma Cloud to Wiz. This individual will serve as an embedded member of the client's cloud security and infrastructure teams, helping operationalize the Wiz platform while leveraging Infrastructure-as-Code and DevSecOps practices to enhance cloud security governance.This is a hands-on technical role requiring strong expertise in Wiz, Terraform, Git-based workflows, and cloud security architecture. The ideal consultant can work effectively in enterprise environments, partner with multiple technical teams, and provide guidance throughout a cloud security transformation initiative.ResponsibilitiesWiz Platform Implementation & OptimizationSupport implementation, configuration, and operationalization of the Wiz Cloud Security PlatformAssist with migration activities from Palo Alto Prisma Cloud to WizDevelop and refine cloud security policies, risk frameworks, and detection capabilities within WizConfigure cloud connectors, security integrations, and data sources across enterprise cloud environmentsTune security findings, improve alert quality, and reduce false positivesCreate dashboards, reporting, and security posture metrics for technical and executive stakeholdersInfrastructure as Code & AutomationDevelop and maintain Terraform modules supporting cloud infrastructure and security controlsAutomate security policy deployment and cloud governance initiatives through Infrastructure as CodeMaintain version-controlled Terraform repositories using GitLabImplement Terraform best practices including modular architecture, state management, testing, and code review processesSupport cloud security automation initiatives across multiple environmentsDevSecOps & CI/CD IntegrationIntegrate security controls and scanning processes into GitLab CI/CD pipelinesEnable automated remediation and compliance workflows where appropriateWork with development and platform engineering teams to shift security left within the software delivery lifecycleEstablish secure deployment patterns aligned with enterprise security requirementsCloud Security EngineeringAssess cloud risk exposure across AWS, Azure, and/or GCP environmentsSupport implementation of cloud-native security best practicesPartner with engineering teams to remediate security findings identified by WizAssist with cloud governance, identity security, vulnerability management, and compliance initiativesProvide technical guidance regarding cloud architecture and security design decisionsClient Engagement & CollaborationAct as an embedded trusted advisor within the client's technical teamsCollaborate with Cloud Engineering, Platform Engineering, Security Operations, Architecture, and Compliance stakeholdersParticipate in technical workshops, architecture reviews, and planning sessionsDocument processes, standards, and operational procedures to ensure long-term platform successRequired Qualifications5+ years of cloud security, cloud engineering, DevSecOps, or platform engineering experienceHands-on production experience with WizExperience implementing or supporting Cloud Security Posture Management (CSPM) solutionsStrong Terraform development and Infrastructure-as-Code experienceStrong Git and GitLab experience, including branching strategies, merge requests, and CI/CD workflowsExperience integrating security controls within automated deployment pipelinesExperience working in AWS, Azure, or GCP cloud environmentsStrong understanding of cloud security principles, identity and access management, vulnerability management, and compliance frameworksExperience working directly with enterprise clients and cross-functional technical teamsStrong communication and stakeholder management skillsPreferred QualificationsExperience migrating from Palo Alto Prisma Cloud to WizExperience within financial services, banking, insurance, or other highly regulated environmentsMulti-cloud experience across AWS, Azure, and GCPExperience with Kubernetes and container securityExperience with security automation and scripting (Python, PowerShell, Bash)Knowledge of cloud compliance frameworks including PCI-DSS, SOC 2, ISO 27001, NIST, or CIS BenchmarksBackground in consulting, professional services, or managed services organizationsWiz certifications and/or cloud platform certifications