Senior Cloud Security Engineer (Cloud Security)

Location: Remote in the U.S.; Remote in North America

Salary: $190K–$215K per year

Company

hirify.global develops and operates cloud environments and infrastructure requiring multi-cloud security controls.

What you will do

• Own the security posture of AWS, GCP, and Azure environments, applying consistent controls across cloud providers.
• Design secure reference architectures and reusable patterns for account and project structures, network segmentation, encryption, key management, and secrets management.
• Embed security into IaC through hardened modules, policy as code, and pre-deploy checks.
• Secure CI/CD pipelines and the software supply chain, including permissions, secrets, artifact integrity, and workload identity.
• Automate security controls, remediation, and evidence collection; operate CSPM and cloud-native security services and drive findings to resolution.
• Build cloud logging and detection, lead cloud incident response, and contribute controls and evidence to SOC 2, ISO 27001, and similar compliance programs.

Requirements

• DevOps, SRE, or platform engineering background with hands-on experience building and operating production infrastructure and CI/CD pipelines.
• Hands-on production experience securing at least two of AWS, GCP, or Azure, including understanding of differences in identity, networking, and logging models.
• Deep knowledge of cloud security best practices, including CIS Benchmarks and cloud-provider security foundations guidance.
• Experience with least-privilege IAM, workload identity, network segmentation, private connectivity, encryption and key management, secrets management, centralized logging, and preventive guardrails.
• Strong coding and scripting skills in at least one general-purpose language such as Python or Go, plus shell scripting.
• Hands-on IaC experience such as Terraform or OpenTofu, including embedding security checks into IaC.
• Strong communication skills and the ability to explain security risk to engineers in actionable terms.

Nice to have

• Familiarity with cloud security tooling such as Prowler, Checkov, Trivy, OPA, or Falco.
• Container and Kubernetes security experience with EKS, GKE, or AKS, including admission control and runtime policy.
• A relevant cloud security certification such as AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate, or CCSP.
• Experience securing SaaS and developer platforms, including identity providers and GitHub organizations.
• Experience supporting SOC 2, ISO 27001, or similar programs, including compliance automation platforms.
• Hands-on cloud incident response or forensics experience.

Culture & Benefits

• Remote work in the U.S. and North America.
• DevOps-oriented security practice focused on building paved roads and automation rather than relying on policy alone.
• Close collaboration with platform and infrastructure engineering, customer support, delivery, IT, and compliance teams.