Senior Cloud Security Engineer

Role Overview

Join Semperis as a Senior Cloud Security Engineer on the Cloud Security team. You will design, build, and maintain secure cloud foundations across Azure, AWS, and GCP (with a focus on AWS), own CSPM capabilities, and define security best practices for Kubernetes environments.

Responsibilities

• Design, build, and maintain secure cloud foundations across Azure, AWS, and GCP (focus on AWS)
• Own and evolve CSPM capabilities, including policies, guardrails, and automated remediation
• Engineer and maintain cloud network security controls, including secure connectivity and segmentation patterns
• Define and enforce security best practices for Kubernetes environments
• Partner with engineering teams to perform security architecture reviews and guide new services/platforms and major changes
• Engineer and maintain identity and access security controls (IAM)
• Contribute to FedRAMP and regulated environment readiness
• Build and operate secure cloud automation and tooling, including self-service workflows
• Apply a security lens to FinOps
• Act as a senior technical partner to engineering, IT, and compliance teams; mentor junior engineers and raise organizational security maturity

Requirements

• Strong understanding of cloud security architecture, including shared responsibility models, secure service design, and defense-in-depth
• Strong communication skills; comfortable providing architecture-level guidance
• 6+ years in cloud security, security engineering, or cloud platform engineering
• Proven experience securing cloud network security (firewalls, WAFs, network segmentation, secure connectivity patterns)
• Hands-on experience securing cloud-native environments (with Azure preferred)
• Ability to operate independently, own complex problems, and deliver practical scalable solutions
• Experience with preventative security controls (CSPM, policy enforcement, secure cloud baselines)
• Experience supporting compliance programs such as FedRAMP, SOC 2, ISO 27001, or NIST
• Ability to script/automate using Python, PowerShell, or similar
• Strong Infrastructure-as-Code skills (Terraform, Bicep, CloudFormation)
• Solid cloud IAM experience (RBAC, workload identity, service principals)

Nice to Have

• Hands-on experience securing Kubernetes environments (AKS/EKS)