Tektend LLC is seeking an experienced Cloud Security Engineer to safeguard our enterprise cloud infrastructure and champion modern security architectures. In this 100% remote role, you will collaborate closely with DevOps, platform engineering, and product teams to architect robust defenses, automate compliance guardrails, and implement least-privilege models across multi-cloud environments.
Key Responsibilities:
- Architect, implement, and maintain cloud security guardrails and automated controls using Infrastructure as Code (Terraform).
- Configure, manage, and optimize Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platforms (CWPP) to identify and remediate misconfigurations.
- Define and enforce Identity and Access Management (IAM) policies, role-based access controls (RBAC), and secrets management standards.
- Integrate security scanning and automated compliance checks directly into CI/CD deployment pipelines (DevSecOps).
- Monitor cloud security telemetry, investigate security alerts, and lead cloud-focused incident response and remediation efforts.
Requirements:
- 4+ years of hands-on experience in cloud infrastructure security (AWS preferred, Azure/GCP is a plus).
- Strong proficiency with Infrastructure as Code (Terraform or CloudFormation) and scripting languages such as Python or Bash.
- Deep understanding of container security and orchestration platforms (Docker, Kubernetes).
- Proven track record of managing IAM policies, zero-trust network architectures, and cloud compliance frameworks (SOC 2, ISO 27001, CIS Benchmarks).
- Relevant cloud or security certifications (e.g., AWS Certified Security - Specialty, CCSP, or CISSP) preferred.
- Must be authorized to work in the United States and reside within the US.
