Senior Technical Consultant - Cloud Security

Accountabilities:

• Lead strategy, roadmap, design, and planning workshops for medium to large security and cloud consulting engagements.
• Set and manage customer expectations while guiding engagement teams toward defined objectives, requirements, milestones, and timelines.
• Lead client-facing delivery activities and, when assigned, serve as the Engagement Lead for customer projects.
• Gather requirements, manage dependencies, monitor project status, and ensure consulting engagements are delivered successfully, on time, and in line with business objectives.
• Identify, analyze, and break down project risks and technical issues into manageable components, determining effective approaches to resolution.
• Create, finalize, and peer-review project deliverables, technical collateral, architecture documentation, and other engagement artifacts.
• Present technical deliverables, recommendations, and findings to client stakeholders, including executive management.
• Support business development through client discovery meetings, service offering demonstrations, project scoping, proposal development, and client presentations.
• Assist with engagement scoping and proposal collateral while identifying opportunities for collaboration across security and technology capabilities.
• Maintain subject matter expertise across at least eight security domains or three security solutions.
• Contribute to the development, enhancement, standardization, and delivery of security service offerings and capabilities.
• Stay current on emerging IT trends, cloud technologies, security standards, and industry practices.
• Provide thought leadership, technical mentorship, and guidance to other consultants and team members.
• Promote continuous improvement by proposing and implementing enhancements to consulting methodologies, service offerings, and delivery practices.

Requirements:

• Extensive professional experience in information security, security governance, compliance, cloud security, or a related technical consulting discipline.
• Proven experience reviewing and implementing secure cloud reference architectures and landing zones.
• Ability to translate traditional risk strategies, including lift-and-shift approaches, into effective cloud-native security controls.
• Strong understanding of multi-cloud governance models, including Infrastructure-as-Code (IaC), policy-as-code (PaC), tagging standards, and multi-account strategies.
• 5+ years of hands-on experience with CNAPP platforms, particularly Wiz and Prisma Cloud.
• Proven ability to deploy and implement Prisma Cloud in enterprise environments and integrate Wiz or Prisma Cloud with ServiceNow, CI/CD pipelines, ticketing systems, and alerting workflows.
• Ability to clearly communicate CNAPP findings, including risk, criticality, and remediation recommendations, to both technical and business stakeholders.
• 5+ years of experience working with AWS, Azure, and/or GCP.
• Familiarity with cloud-native security services such as AWS Security Hub, Microsoft Defender for Cloud, and Google Security Command Center.
• Hands-on experience with cloud identity and access management, including IAM, federation, and RBAC across multi-cloud environments.
• Familiarity with identity-as-a-service platforms such as Okta and Entra ID.
• Strong knowledge of security standards and frameworks including CIS Benchmarks, NIST, FedRAMP, ISO 27001, and GDPR.
• Experience designing and mapping cloud-specific security controls for audit and compliance requirements.
• Experience integrating security monitoring with SIEM platforms such as Splunk, Sentinel, or Chronicle and using cloud-native detection capabilities.
• Ability to read, understand, and apply Infrastructure-as-Code using Terraform, Bicep, and/or CloudFormation.
• Familiarity with policy-as-code tools such as OPA and Sentinel, as well as IaC scanning within CI/CD pipelines.
• Proficiency in scripting with Python, PowerShell, and/or Bash to automate security tasks and workflows.
• Experience with Docker, Kubernetes, and securing containerized workloads at scale.
• Strong consulting, communication, problem-solving, and stakeholder management skills, with the ability to operate effectively across technical and business audiences.

Benefits:

• Medical, dental, and vision insurance.
• 401(k) retirement plan.
• Paid company holidays.
• Paid time off.
• Paid parental and caregiver leave.
• Professional development and continued learning opportunities.
• Sponsored certifications and professional credentials.
• Access to advanced technology and a multi-million-dollar technology lab.
• Cross-department training and development opportunities.
• Employee initiatives and groups supporting diversity, inclusion, and professional growth.
• Compensation structured around On-Target Earnings (OTE), including base salary and any applicable target bonus; the range may vary based on experience, qualifications, and geographic location.