Security Baseline Engineer (Cloud Security)

TL;DR

Security Baseline Engineer (Cloud Security): Designing and implementing secure configuration baselines across cloud environments with an accent on cloud security, GRC, and automation. Focus on translating policies and industry standards into enforceable, scalable controls.

Location: Las Colinas, TX | Charlotte, NC | Chandler, AZ

Company

hirify.global is seeking a Security Configuration Baseline Engineer.

What you will do

• Build and maintain baseline-as-code for cloud security controls.
• Translate NIST, CIS, and policy requirements into technical configurations.
• Implement guardrails, drift detection, and compliance monitoring.
• Develop automation using Python and Infrastructure as Code (Terraform).
• Support audit readiness, reporting, and governance workflows.

Requirements

• 5+ years cloud security / security engineering.
• 3+ years risk & controls / governance.
• 3–5 years Cloud Security Posture Management (CSPM).
• 2–4 years Python scripting.
• Experience with Azure and/or GCP, IaC, and policy-as-code.
• Knowledge of NIST, CIS, ISO frameworks.
• Experience in regulated environments.

Nice to have

• CI/CD security integration.
• Baseline-as-code program experience.
• Audit or regulatory exposure.