Cloud Security Engineer – Risk Reduction (Remote)

Role Overview

Cloud Security Engineer – Risk Reduction for a large-scale retailer supporting enterprise cloud remediation. The role focuses on reducing critical security risk across complex, multi-cloud environments, primarily GCP (with exposure/preference for Azure and AWS).

Responsibilities

• Develop and execute remediation strategies for high-priority cloud security issues across GCP, Azure, and AWS.
• Maintain and update Terraform codebases to implement secure infrastructure changes across many projects.
• Build automation scripts and pipelines to resolve recurring security issues at scale.
• Partner with engineering/infrastructure teams to rotate and secure compromised or mismanaged secrets.
• Identify root causes of vulnerabilities and implement fixes to prevent recurrence.
• Validate and verify remediation completion across systems and environments.
• Assess existing architecture and repositories to anticipate risks, dependencies, and potential service impacts.
• Collaborate across cloud infrastructure, networking, backend systems, and data engineering teams.

Requirements

• 5+ years of cloud engineering with strong focus on Google Cloud Platform (GCP).
• Experience writing automation scripts and/or pipelines for GCP environments.
• 3+ years writing production-level Terraform in complex environments (e.g., 100+ GCP projects).
• Strong expertise in infrastructure and networking across on-prem and cloud, including SDN, compute, storage, databases, and IAM.
• Proven use of infrastructure-as-code, scripting, and CI/CD practices.
• Ability to troubleshoot and resolve complex issues with minimal supervision.
• Strong communication skills and ability to collaborate across technical teams.

Preferred Qualifications

• Experience with Azure or AWS.
• Familiarity with tools such as GitHub or Atlantis.
• Direct experience in cloud security engineering or security remediation initiatives.
• Background combining infrastructure engineering and security disciplines.

Contract & Location

• Remote (US-based)
• W2 Contract (6 months); benefits available; not open for C2C.