Manager, Cloud Security Engineering

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead, oversee, mentor, and develop Cloud Security Engineers through clear expectations, constructive feedback, performance evaluations, and career development paths.

• Construct the interview framework, recruit and select engineers, and facilitate their onboarding process.

• Strategically plan capacity, assign engineers to projects, monitor milestones and quality, and ensure that concurrent engagements stay on schedule.

• Act as an escalation point for both technical issues and relationship challenges.

• Direct client discussions with engineering leads and executives regarding scope, risk, and remediation priorities.

• Define and uphold reusable Terraform and CloudFormation baselines, landing zone patterns, IAM and logging modules, as well as code review protocols.

• Evaluate AWS multi-account, Azure Hub-Spoke, Landing Zone, IAM, network segmentation, and encryption architectures.

• Establish the approach for AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud.

• Create logging pipelines for SIEM ingestion.

• Set up guardrails and automated remediation processes, including SAST, DAST, and secret scanning in GitHub Actions or Azure DevOps.

• Ensure that technical controls meet SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP compliance requirements.

• Confirm that evidence supports audit readiness.

• Establish escalation procedures for cloud security incidents and ensure effective containment, diagnostics, and improvements after incidents.

• Collaborate with GRC delivery teams, providing technical insights on scoping, statements of work, and new client opportunities.

• Monitor delivery health, remediation cycle times, and module reuse.

• Invest in tooling and automation.

• Engage in architecture reviews, complex remediations, and client workshops.

• Coordinate with client engineering leads and executives during U.S. Eastern Time business hours.

⛳️ Requirements

• Proven experience as a people manager who has successfully hired, coached, and retained engineers.

• Extensive hands-on experience in securing AWS, Azure, and GCP environments.

• Strong expertise in IAM strategy, including RBAC, ABAC, permission boundaries, and federated identity through Okta or Entra ID.

• Background in network zoning, encryption, and logging.

• Proficient in Terraform.

• Working knowledge of CloudFormation, Python, or Bash.

• Capability to review module design, versioning, state management, and provider security controls.

• Experience in mapping cloud configurations to meet SOC 2, ISO 27001, GDPR, and HIPAA requirements.

• Ability to manage multiple client portfolios and competing priorities in a dynamic startup setting.

• Experience collaborating with U.S.-based technology founders, DevOps leads, and executive teams.

• Exceptional written and verbal communication skills in English.

• Active certifications including AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.

• Experience in building or scaling a security engineering team within a consulting, MSSP, or rapidly growing technology environment.

• Familiarity with capacity planning and resource allocation across client engagements.

• Practical experience with CMMC-compliant enclaves or FedRAMP security architectures, including NIST 800-53 and NIST 800-171 control implementation.

• Hands-on knowledge of configuring and enforcing FIPS 140 standards across cloud services.

• Experience in securing microservice architectures, Docker, and Kubernetes, including runtime security controls and vulnerability scanning.

• Direct experience with Zero Trust deployment models, identity-centric security policies, network micro-segmentation, and context-aware access.

• Advanced utilization of logging platforms, SIEM, vulnerability management tools, and threat hunting feeds.

• Excellent written and verbal communication skills in English.

• Reliable, high-speed internet connection and a professional home office setup.

• Availability for a standard schedule from 8:00 AM to 5:00 PM U.S. Eastern Time.

• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities.

• Must participate in live video interviews with the camera on and verify identity during recruitment and onboarding.

• Employment is contingent upon identity verification and background screening, where permitted by law.

• Must have authorization to work in the U.S. without the need for visa sponsorship now or in the future.

🏝️ Benefits

• Opportunities for career development through mentorship and training.

• Reimbursement for approved role-relevant training and certification programs.

• Competitive base salary with regular performance reviews linked to merit-based evaluations.

• Bonus opportunities available.

• Significant potential for career advancement.

• A remote-first culture that allows flexibility to work from anywhere.

• Collaboration within a global team.