United States
Remote only
Available
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Manager, Cloud Security Engineering based in the United States.
The Manager, Cloud Security Engineering will lead and develop a team of cloud security specialists responsible for designing and implementing secure cloud environments across AWS, Azure, and GCP. This is a hands-on leadership opportunity combining technical expertise, people management, and strategic client delivery. You will oversee multiple client engagements, establish engineering standards, and ensure security solutions are scalable, automated, and aligned with industry compliance frameworks. Working closely with technical leaders, executives, and governance teams, you will translate complex security requirements into practical infrastructure solutions. You will also drive continuous improvement through automation, reusable infrastructure modules, and effective engineering practices. This remote-first role offers the opportunity to shape a growing security engineering practice in a fast-paced, highly collaborative environment.
Lead, mentor, and develop a team of Cloud Security Engineers through regular coaching, performance reviews, career development plans, and clear technical expectations.
Manage recruitment, selection, onboarding, and workforce planning to build a high-performing engineering team.
Oversee delivery across multiple client engagements, including resource allocation, capacity planning, project milestones, technical quality, and delivery timelines.
Act as the primary escalation point for technical challenges and client relationship matters, leading discussions with engineering leaders and executives.
Establish and maintain engineering standards, reusable Terraform and CloudFormation modules, secure cloud landing zones, IAM configurations, and infrastructure-as-code practices.
Guide cloud architecture decisions across AWS, Azure, and GCP, ensuring secure configurations covering identity management, network segmentation, encryption, monitoring, and logging.
Oversee the implementation and optimization of native cloud security solutions, including AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud.
Integrate security into development and deployment pipelines by implementing automated guardrails, remediation workflows, vulnerability scanning, and secret detection.
Ensure technical cloud controls effectively address regulatory and security frameworks, including SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.
Lead cloud security incident response processes, ensuring rapid containment, investigation, remediation, and continuous improvement.
Collaborate with Governance, Risk, and Compliance (GRC) teams to align technical implementations with audit requirements, client objectives, project scopes, and new business opportunities.
Monitor engineering delivery performance, remediation timelines, and infrastructure module reuse while identifying opportunities to improve automation and operational efficiency.
Remain hands-on when needed by participating in architecture reviews, complex remediation projects, and client technical workshops.
Significant experience managing, mentoring, and developing cloud security engineering teams, including recruitment, performance management, and team capacity planning.
Deep hands-on expertise securing multi-cloud environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
Strong knowledge of cloud security architecture, including IAM strategies, RBAC, ABAC, federated identity, least-privilege access, network segmentation, encryption, and centralized logging.
Advanced proficiency in Terraform and practical experience reviewing infrastructure-as-code modules, versioning, state management, and security configurations.
Working knowledge of CloudFormation and scripting languages such as Python or Bash.
Demonstrated experience translating regulatory and compliance frameworks into effective technical security controls, particularly SOC 2, ISO 27001, GDPR, and HIPAA.
Experience implementing and managing cloud-native security tools, SIEM platforms, vulnerability management solutions, and threat detection capabilities.
Strong understanding of DevSecOps practices, including SAST, DAST, secret scanning, automated remediation, and security integration into GitHub Actions or Azure DevOps.
Proven ability to manage multiple client engagements simultaneously in a fast-paced consulting, MSSP, or high-growth technology environment.
Experience advising clients, leading architectural workshops, managing escalations, and communicating technical risks to both engineering teams and executive stakeholders.
Excellent written and verbal English communication skills, with strong problem-solving, decision-making, organizational, and interpersonal abilities.
Ability to work remotely with a reliable high-speed internet connection and a professional home office environment.
Availability to work a standard schedule of 8:00 AM to 5:00 PM U.S. Eastern Time and willingness to travel locally for occasional onsite meetings or team activities.
Must be authorized to work in the United States without requiring current or future employment-based visa sponsorship.
Additional qualifications that would be advantageous:
Relevant industry certifications, such as AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.
Experience building or scaling security engineering teams in consulting, managed security services, or rapidly growing technology organizations.
Hands-on experience with federal and regulated environments, particularly CMMC-compliant infrastructure, FedRAMP architectures, and NIST 800-53 or NIST 800-171 implementations.
Practical experience implementing FIPS 140 encryption requirements across cloud services.
Knowledge of container security, microservices, Docker, Kubernetes, runtime protection, and vulnerability scanning.
Experience deploying Zero Trust architectures, identity-centric security policies, network micro-segmentation, and context-aware access controls.
Advanced familiarity with SIEM platforms, security monitoring, vulnerability management, and threat-hunting technologies.
Competitive compensation: Attractive base salary with regular performance reviews and merit-based salary progression.
Performance incentives: Potential bonus opportunities linked to individual performance and contributions.
Remote-first culture: Flexibility to work remotely while collaborating with an international team.
Career development: Clear opportunities for professional growth, mentorship, and career advancement.
Training support: Reimbursement for approved role-related training programs and successfully completed certification courses.
Professional growth: Opportunity to build and shape a growing cloud security engineering practice within an early-stage company.
Leadership opportunities: Direct responsibility for team development, technical strategy, and client delivery.
Collaborative environment: Work alongside experienced security professionals on challenging projects across multiple industries.
Recruitment involves live video interviews with cameras enabled throughout the process.
Candidates must be prepared to complete identity verification during recruitment and onboarding.
Employment is conditional upon successful identity verification and background screening, where legally permitted.
The selection process includes structured interviews with hiring managers and cross-functional stakeholders.
Candidates can expect regular communication and updates throughout the recruitment process.
Employment-based visa sponsorship or visa transfers are not available for this position.
