Senior Cloud Security Engineer

Location: San Jose, California, United States

Salary: $149,100–$215,925 USD annually for the Bay Area, California; incentive opportunities may also apply.

Company

hirify.global develops and operates technology environments requiring secure cloud infrastructure, workload protection, and governance across Azure and AWS.

What you will do

• Design and implement secure Azure and AWS architectures, including landing zones, accounts, subscriptions, networking, shared services, and workload environments.
• Build cloud identity and access controls covering least privilege, federation, privileged access, workload identities, secrets, and cross-account or cross-tenant risks.
• Secure cloud workloads and platforms including virtual machines, containers, Kubernetes, serverless services, storage, databases, and managed services.
• Embed security controls into infrastructure-as-code and CI/CD workflows using automated policy checks, configuration analysis, secrets detection, image scanning, and deployment validation.
• Improve logging, monitoring, detection, and incident response across Azure and AWS using services such as Defender for Cloud, Sentinel, Security Hub, GuardDuty, AWS Config, and CloudTrail.
• Define governance and compliance controls, support audits and risk assessments, communicate mitigations, and mentor engineers across platform, infrastructure, application, identity, data, and security operations teams.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent practical experience.
• 7+ years of experience in cloud security, cloud engineering, infrastructure security, security engineering, or a closely related discipline.
• Hands-on security engineering experience with both Microsoft Azure and AWS.
• Strong understanding of cloud IAM, including Azure RBAC, Microsoft Entra ID, AWS IAM, federation, privileged access, and workload identities.
• Experience designing or securing cloud networking, including segmentation, private connectivity, firewalls, routing, DNS, and internet exposure controls.
• Experience securing cloud compute, storage, databases, containers, Kubernetes, and/or serverless workloads.
• Practical experience with infrastructure as code and automated cloud deployment workflows.
• Experience with cloud logging, monitoring, security posture management, vulnerability management, and incident response.
• Understanding of encryption, key management, secrets management, certificate management, and cloud data protection, plus scripting or automation with Python, PowerShell, Bash, or similar languages.

Nice to have

• Oracle Cloud Infrastructure security architecture, identity, networking, logging, or governance experience.
• Relevant certifications such as Microsoft Cybersecurity Architect Expert, Azure Security Engineer Associate, AWS Security Specialty, AWS Solutions Architect, CCSP, or CISSP.
• Experience with cloud security platforms, Terraform, Bicep, CloudFormation, Open Policy Agent, Checkov, Kubernetes and managed services such as AKS and EKS.
• Experience with multi-account, multi-subscription, multi-region, or hybrid cloud environments.
• Familiarity with NIST CSF, NIST SP 800-53, CIS Benchmarks, ISO 27001, SOC 2, PCI DSS, or applicable industry requirements.
• Experience with cloud detection engineering, threat modeling, cloud incident response, or zero-trust principles.

Culture & Benefits

• Regular full-time employment as a hands-on technical lead.
• Cross-functional collaboration with cloud platform, infrastructure, application, data, identity, and security operations teams.
• Incentive opportunities based on individual and company performance.
• Applicants must be eligible for any required U.S. export authorizations.
• Artificial intelligence is used to screen, assess, or select applicants.

Hiring process

• Applications are evaluated using artificial intelligence for screening, assessment, or selection.