Senior Cloud Security Engineer

Location: Hybrid, requiring 3 days per week in the office in Holmdel, NJ; New York, NY; or Bethlehem, PA, United States

Salary: $118,980–$195,465 base pay annually, with possible incentive compensation

Company

hirify.global is a regulated organization focused on insurance and financial well-being.

What you will do

• Implement and continuously improve AWS security capabilities across identity, cryptography, PKI, CSPM, and CNAPP.
• Engineer IAM policies, Service Control Policies, cross-account access models, least-privilege patterns, and RBAC/ABAC controls.
• Implement continuous monitoring, threat detection, vulnerability management, workload protection, and automated remediation from code through runtime.
• Integrate AWS security services with CNAPP and CSPM platforms, including posture management and workload protection capabilities.
• Develop security automation within Infrastructure as Code and CI/CD processes, using reusable patterns and guardrails.
• Assess cloud risks, improve governance and audit readiness, and communicate technical findings to engineering and business stakeholders.

Requirements

• 5+ years of experience in IT, cybersecurity, cloud engineering, or related disciplines, including 5+ years of hands-on AWS security experience.
• Strong knowledge of AWS IAM, PKI, CSPM, and CNAPP capabilities.
• Experience designing AWS identity controls, including IAM Identity Center, least-privilege policies, SCPs, cross-account access, and RBAC/ABAC models.
• Experience with AWS KMS, AWS Certificate Manager, and enterprise PKI capabilities.
• Experience implementing or operating CNAPP and CSPM platforms such as Wiz, Prisma Cloud, and AWS Security Hub.
• Understanding of zero trust, encryption at rest and in transit, workload and container security, identity boundaries, and network security.
• Experience with IaC and security automation using Terraform, CloudFormation, CI/CD pipelines, and shift-left security practices.
• Experience with NIST, CIS, SOC 2, SOX, NYDFS, MAR, and the AWS Well-Architected Framework Security Pillar.
• Must be legally authorized to work in the United States without current or future employer sponsorship.

Nice to have

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• Experience with security technology evaluations, RFP/RFI processes, vendor assessments, and proofs of concept.
• Certifications such as AWS Certified Security – Specialty, CISSP, or CCSP.

Culture & Benefits

• Full-time employment with contemporary, supportive, flexible, and inclusive benefits.
• Professional skill-building, leadership development, and philanthropic opportunities.
• Benefits apply to full-time eligible employees.
• Equal opportunity employment and reasonable accommodation are provided.