Back to all roles
On-siteFull timePosted Nov 9, 2026

Cloud Security & Automation Engineer

Job ID GT-1077

About the role

We are seeking an experienced Cloud Security & Automation Engineer to strengthen security across public cloud, hybrid, container, and cloud-native environments. This hands-on role owns the day-to-day engineering, administration, and operation of cloud exposure management capabilities, translating prioritized risks into durable technical controls, automated workflows, and measurable remediation outcomes. You will partner closely with Vulnerability Management and AI Security teams. Hybrid role with multiple US office locations (Wilmington DE, Manassas VA, Urbandale IA, Coppell/Dallas TX).

Responsibilities

  • Configure, administer, optimize, and troubleshoot cloud exposure management platforms (e.g., Wiz or Prisma Cloud)
  • Manage cloud account/subscription onboarding, connectors, permissions, policies, integrations, dashboards, and platform health
  • Support cloud security operations across Azure, AWS, and other in-scope cloud services
  • Identify, assess, and prioritize cloud risks based on attack paths, asset criticality, identity/network exposure, and data sensitivity
  • Implement and maintain security controls across public cloud, hybrid, container, and cloud-native environments
  • Strengthen IAM, least-privilege access, workload security, secrets management, encryption, logging, and monitoring
  • Develop automation using Python and/or PowerShell and integrate platforms via REST APIs and CI/CD
  • Implement Infrastructure as Code and Policy as Code using Terraform, Bicep, ARM, CloudFormation, or OPA
  • Automate cloud security remediation and reporting processes
  • Drive remediation initiatives across engineering and cloud platform teams
  • Produce technical documentation, operational metrics, and leadership-ready risk reports

What happens after you apply

A recruiter reviews your application within two business days. If your experience and rate line up, we call you before submitting you anywhere — your profile is never sent to a client without your say-so.