Cloud Security Engineer – Risk Reduction (Remote)

Role Overview

Cloud Security Engineer focused on risk reduction across the client’s public cloud platforms (GCP, Azure, AWS). You will improve the organization’s cloud security posture by building secure deployment patterns, implementing policy-as-code, and modernizing Cloud Security Posture Management (CSPM) capabilities.

Responsibilities

• Define secure cloud deployment patterns for common patterns across GCP, Azure, AWS
• Build reusable Terraform modules and automation to enable secure adoption
• Modernize CSPM capabilities by evaluating, testing, and implementing CSPM solutions with strong focus on Wiz
• Create enterprise Policy-as-Code libraries using Open Policy Agent (OPA) to enforce standards and automate compliance
• Remediate cloud security risks in collaboration with cloud engineering, infrastructure, and security teams
• Develop scalable security controls and automation to improve governance and reduce operational risk

Requirements

• Bachelor’s degree in Computer Science/IT or equivalent experience
• 5+ years cloud engineering experience in enterprise environments
• Current Google Cloud Professional (GCP) Certification (required)
• Proven experience writing/testing/maintaining Policy-as-Code with OPA and building reusable policy libraries
• Hands-on policy-as-code experience with additional languages such as OPA/Rego, Sentinel, or CEL
• Hands-on experience with Wiz CSPM (identify, prioritize, remediate cloud risks)
• Strong analytical/problem-solving skills and ability to resolve complex issues independently
• Ability to understand existing cloud architectures and develop scalable remediation strategies while minimizing operational risk
• Strong communication and collaboration in Agile environments
• Commitment to continuous learning
• 5+ years hands-on engineering supporting GCP
• 3+ years production experience developing/maintaining Terraform in complex enterprise environments
• Strong scripting/automation experience using Python and/or Bash

Contract / Location

• W-2 contract for 12 months (Dahl Consulting engagement)
• Remote, with some travel within the US possible