Cyber Security Engineer (Cloud Security)

About the role

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Security Engineer (Cloud Security) based in the United States.

As a Cyber Security Engineer specializing in Cloud Security, you will play a critical role in protecting cloud infrastructure, containerized workloads, and infrastructure-as-code environments within a healthcare technology setting. You will lead initiatives to strengthen cloud security posture, implement Zero Trust access strategies, and safeguard sensitive data across complex environments. Working primarily with Microsoft Azure, Kubernetes, and modern security platforms, you will identify vulnerabilities, mitigate risks, and continuously improve security controls. You will also contribute to incident response, identity and access management, and broader enterprise security operations. Collaborating closely with IT, SRE, and development teams, you will embed security practices throughout infrastructure and software delivery processes. This remote opportunity is ideal for a hands-on security professional who enjoys taking ownership, solving complex challenges, and working in a collaborative, regulated environment.

Accountabilities In this role, you will strengthen cloud security operations, protect critical infrastructure, and ensure compliance with relevant security and regulatory standards. Your main responsibilities will include:

-

Manage and secure cloud infrastructure and cloud-based applications, primarily within Microsoft Azure environments.

-

Protect containerized workloads and Kubernetes environments, including Azure Kubernetes Service (AKS), through network policies, workload identity controls, runtime protection, and container image scanning.

-

Own and continuously improve Cloud Security Posture Management (CSPM), identifying and remediating configuration weaknesses across cloud environments.

-

Secure infrastructure-as-code orchestration platforms, including Terraform and OpenTofu, by implementing access controls, secrets management, and deployment approval workflows.

-

Manage identity and access security through Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models.

-

Review network architectures and proposed connectivity changes, providing security recommendations on network segmentation, sensitive data flows, and firewall controls.

-

Collaborate with IT and Site Reliability Engineering (SRE) teams to investigate and resolve network security concerns.

-

Administer Zero Trust network access and edge security solutions to protect access to corporate and cloud resources.

-

Manage broader enterprise security solutions, including SIEM, Data Loss Prevention (DLP), Endpoint Detection and Response (EDR), Extended Detection and Response (XDR), and vulnerability management tools.