Multi Cloud Security Engineer
Multi Cloud Security Engineer Sunnyvale, CA6+ Months Contract to HireMust-Have Requirements: Multi-Cloud IAM: Strong AWS IAM plus hands-on IAM security experience in at least one of Azure Entra ID, GCP, or OCI.IAM Implementation: Personally designed and implemented IAM roles, custom policies, permission sets, least-privilege controls, service accounts, and access governance. IAM Standardization: Experience establishing and enforcing consistent security baselines across multiple cloud environments. Kubernetes Security: Hands-on implementation of Kubernetes RBAC, network policies, admission controllers, secrets management, and cluster hardening. Terraform: Strong experience implementing cloud security policies and guardrails through Infrastructure-as-Code. Multi-Cloud Networking: Practical experience with cloud networking and security controls. AI Security: Experience with AI-driven security identification, validation, or remediation.
CSPM:
Experience with Wiz or comparable tools, including actual vulnerability remediation.
Key Responsibilities:
- Cloud Infrastructure Security: Securely deploy and maintain infrastructure across AWS, Azure, GCP, and OCI, establishing cloud-specific guardrails that prevent insecure deployments and configurations.
- Kubernetes Cluster Hardening: Implement and enforce security best practices for cloud-native Kubernetes clusters, including granular Role-Based Access Control (RBAC), network policies, and admission controllers.
- Identity & Access Management (IAM): Develop and enforce authentication and authorization policies across all systems. Manage identities across Active Directory, email platforms, and cloud solutions, and enforce least privilege at the cloud, cloud-service, and container levels.
- Container Security: Secure container images, registries, and runtime environments using Docker, Podman, and container scanning solutions.
- Infrastructure-as-Code (IaC) Security: Manage infrastructure and security policies in version-controlled Git repositories using Terraform, Cloud
- Formation, or AWS CDK for consistent, auditable, and secure deployments.
- Cloud Security Posture Management (CSPM): Maintain CSPM tools such as Wiz to continuously detect and remediate misconfigurations and compliance drift.
- Compliance Automation: Automate compliance checks and generate audit evidence across the multi-cloud environment.
- Runtime Security: Monitor and protect running applications and containers from threats throughout their operational lifecycle.