Senior Security Cloud Engineer

Job summary

This hands-on security engineering role designs, builds, and assesses automated controls protecting cloud platforms, primarily Google Cloud Platform (GCP) and Amazon Web Services (AWS), in a complex, regulated environment. The work includes Terraform-based Infrastructure as Code and Policy as Code guardrails, Wiz CNAPP rollout, security scanning in CI/CD pipelines, and Python-based continuous monitoring and evidence collection aligned with CIS Benchmarks, NIST CSF, and APRA CPS 234.

Benefits

Qualifications

• Cloud security engineering experience across GCP and/or AWS; GCP is highly desirable.
• Hands-on experience with Infrastructure as Code and Policy as Code, particularly Terraform.
• DevSecOps experience embedding security controls and scanning into CI/CD pipelines.
• Experience with cloud security platforms such as Wiz or CNAPP and Kubernetes environments such as GKE and EKS.
• Python security automation experience, including continuous controls monitoring.
• Knowledge of CIS, NIST, and APRA CPS 234, with the ability to engage and influence technical and business stakeholders.

Responsibilities

• Design, build, and maintain automated security controls across GCP and AWS, including IAM, network security, encryption, monitoring, and Kubernetes security.
• Develop Infrastructure as Code and Policy as Code using Terraform, OPA/Rego, Sentinel, GCP Organization Policies, and AWS SCPs.
• Lead Wiz rollout and integrate cloud security capabilities with identity, security operations, ticketing, and engineering environments.
• Embed automated IaC, secrets, and container image scanning and policy controls into CI/CD pipelines.
• Build Python-based continuous controls monitoring and automated evidence collection for security frameworks.
• Partner with cloud platform and engineering teams to remediate cloud risks and strengthen secure cloud and IaC practices.

Skills

Industry

Relocation