Senior Cloud Security Engineer

POSITION SUMMARY: CODICE seeks an experienced Senior Cloud Security Engineer to join our team. The ideal candidate will be responsible for securing, managing, and operating an AWS cloud environment, with a focus on container-based deployments. This role requires a deep understanding of cloud security best practices, extensive experience with AWS services, and the ability to implement and maintain robust security controls in a dynamic cloud environment. ESSENTIAL FUNCTIONS Duties and Responsibilities Deploy and maintain AWS cloud security controls as established by the client. Identify, deploy, and maintain necessary cloud security controls to ensure secure operation of the client’s AWS environment(s). Manage source-to-image container-based deployment models and image-stream container management. Oversee automated CI pipeline management and automated security scans, especially during container image building. Create and manage cloud infrastructure through Infrastructure as Code (IaC) practices. Support GitOps operational model, managing infrastructure through pull requests. Implement and support deployment to multiple container-based cluster orchestration frameworks. Apply business security rules through automated "operator agent" systems. Implement and manage cloud-native container networking interfaces and network-level isolation. Ensure zero-downtime scaling and upgrades of cloud systems. Implement and manage backups of all stateful components with fine-grained restoration capabilities. Manage secrets using cloud-native Key Management Service (KMS) stores. Implement and maintain auditing capabilities to view infrastructure divergence from IaC. Plan and execute zero-downtime migrations of production environments. Implement and support automated approval-based continuous deployment (CD) processes. Develop and maintain a chaos operations model to ensure system robustness. Implement and manage mutual TLS across all container communications in the cluster. Develop and maintain full dashboard visibility on the cluster. Implement automatic graphing of network communication patterns and dependencies. Design and support service mesh networking models. Implement read-write-many distributed storages solutions cluster-wide. Design and implement disaster recovery solutions in different cloud regions (RTO/RPO 1 hour). Manage and analyze security logs, supporting the client’s IT staff in monitoring and conducting in-depth analysis. Collaborate with the client Privacy Officer to manage incident response in the event of a data breach. Maintain a centralized repository for log collection and analysis, ensuring constant monitoring to identify potential threats and vulnerabilities. Knowledge, Skills and Abilities Advanced understanding of AWS cloud services and architecture In-depth knowledge of cloud security best practices and technologies Comprehensive understanding of container-based environments and their security implications Thorough knowledge of Infrastructure as Code (IaC) principles and practices Strong understanding of networking concepts, including VPNs, firewalls, and service mesh architectures Deep knowledge of encryption technologies and their applications in cloud environments Familiarity with industry standards and regulations such as NIST, HIPAA, and SOC 2 Understanding of CI/CD pipelines and their security considerations Knowledge of GitOps principles and practices Understanding of disaster recovery concepts and strategies in cloud environments Knowledge of log management and analysis techniques Proficiency in implementing and managing AWS security services (e.g., AWS Security Hub, Amazon GuardDuty, Amazon Inspector) Ability to design and implement secure cloud architectures Skill in managing and securing container-based deployments Proficiency in writing and managing Infrastructure as Code (e.g., using tools like Terraform or CloudFormation) Ability to implement and manage automated CI/CD pipelines with integrated security checks Skill in implementing and managing Kubernetes or other container orchestration platforms Proficiency in implementing zero-trust security models in cloud environments Ability to design and implement robust backup and disaster recovery solutions Skill in implementing and managing service mesh architectures Proficiency in log analysis and security event management Ability to conduct thorough security assessments and audits Skill in implementing chaos engineering principles to ensure system robustness Strong problem-solving and analytical thinking capabilities Excellent verbal and written communication skills, including the ability to explain complex technical concepts to non-technical stakeholders Ability to work effectively in cross-functional teams and collaborate with various departments Capacity to manage multiple projects and priorities in a fast-paced environment Ability to stay current with rapidly evolving cloud technologies and security threats Strong attention to detail, especially when implementing and auditing security controls Ability to think creatively to develop innovative solutions to complex security challenges Capacity to work under pressure, particularly during security incidents or critical system updates Ability to mentor and guide junior team members on cloud security best practices Strong ethical standards and ability to handle sensitive information with discretion Ability to adapt quickly to new technologies and methodologies in cloud security Capacity for continuous learning and professional development in the rapidly evolving field of cloud security QUALIFICATIONS Required Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Required Experience: Minimum of 8 years of experience in IT security, with a focus on designing and implementing security architectures for cloud environments. Proficiency with AWS Cloud Platform and deep understanding of cloud security best practices and technologies. Extensive experience with security technologies, including firewalls, VPNs, IDS/IPS, WAFs, SIEM, and endpoint security solutions. Strong knowledge of encryption technologies and AWS security services such as Amazon Cognito, AWS Security Hub, Amazon GuardDuty, and Amazon Inspector. Familiarity with industry standards and regulations such as NIST, HIPAA, and SOC 2. Experience in conducting security assessments and audits. Required Licensure/ Certification: AWS Certified Security – Specialty (earned within the past 5 years) Preferred Certifications (one or more) Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) Certified Information Security Manager (CISM) Certified Information Systems Auditor (CISA)