Job Description
Job Description
Principal Security Engineering (Cloud Security)
Dallas, TX or Chicago, IL | Hybrid (2 Days Onsite) | Full-Time
Confidential Client
No Third Parties | No C2C | No Visa Sponsorship Available
Local candidates or those willing to relocate are encouraged to apply. Final interview must be completed in person.
Our client is seeking a senior Cloud Security Engineer to join a highly sophisticated enterprise security organization responsible for securing large-scale AWS cloud infrastructure and modern DevSecOps environments.
This is a senior individual contributor role focused on designing, implementing, and supporting enterprise cloud security architecture, automation, identity management, and infrastructure security. The ideal candidate is a hands-on engineer who enjoys solving complex security challenges while partnering closely with engineering, infrastructure, and architecture teams.
Key Responsibilities
- Design, implement, and maintain secure AWS cloud infrastructure.
- Support and enhance enterprise cloud security controls, automation, and compliance.
- Lead security engineering initiatives across cloud and on-premises environments.
- Develop and maintain Infrastructure-as-Code (IaC) and Security-as-Code solutions using Terraform and Ansible.
- Build and improve secure CI/CD pipelines while integrating security throughout the software development lifecycle.
- Partner with architecture, infrastructure, and development teams to deploy new technologies securely.
- Implement cloud security best practices aligned with NIST, CIS, and industry standards.
- Support privileged access management, identity services, and enterprise authentication platforms.
- Drive automation that improves operational efficiency, compliance, monitoring, and remediation.
- Participate in multiple high-impact security initiatives across the enterprise.
Required Qualifications
- 7+ years of Security Engineering experience
- 5+ years supporting AWS cloud architecture and services
- 5+ years working within DevOps / DevSecOps environments
- Strong experience with:
-
- AWS Security
- Terraform
- Ansible
- Jenkins or similar CI/CD platforms
- Infrastructure as Code (IaC)
- Security as Code
- Advanced knowledge of:
-
- Identity & Access Management (IAM)
- OAuth2 / OpenID Connect
- Active Directory
- Kubernetes security
- PKI and certificate-based authentication
- Experience supporting enterprise cloud infrastructure and automation
- Strong scripting experience with Python, Bash, Go, or Groovy
Preferred Experience
Experience with one or more of the following is highly desirable:
- HashiCorp Vault
- CyberArk
- PKI / HSM
- Active Directory Certificate Services (ADCS)
- Kubernetes
- GitHub Actions or GitLab CI
- Enterprise privileged access management (PAM)
- AI-assisted development tools such as Claude Code, OpenAI Codex, or Gemini CLI
What We're Looking For
We're looking for a technically strong security engineer who enjoys building secure cloud platforms, automating security controls, and improving enterprise infrastructure through modern cloud engineering and DevSecOps practices.
The ideal candidate is collaborative, highly technical, and comfortable working across security, engineering, architecture, and infrastructure teams while leading complex technical initiatives.
Important Requirements
- Hybrid schedule – must work onsite two days per week
- Final interview must be completed in person
- Candidates must be able to satisfy the onsite interview and hybrid work requirements
- No Third Parties
- No Corp-to-Corp (C2C)
- No Visa Sponsorship Available
- Relocation assistance may be available for highly qualified candidates
Company DescriptionWe care about the success of each member of out team! We strive for long lasting partnerships where you can grow and expand your career.
Company Description
We care about the success of each member of out team! We strive for long lasting partnerships where you can grow and expand your career.