Senior Cloud Engineer - Governance

Delinea; Ciudad de México; On-site; MXN 900,000 - 1,500,000; Full time

Benefits offered by this job

Healthcare insurance

Pension matching

Life insurance

Employee assistance program

Time off plans

Paid holidays

Job summary

Delinea is seeking a Senior Cloud Engineer focused on Cloud Governance to ensure secure, compliant cloud infrastructure across multi-cloud environments. You will implement governance frameworks, IAM policies, and JIT privilege mechanisms, collaborating with development and security teams.

You will drive automation and CI/CD integration, monitor costs, and report insights to leadership while maintaining strong communication with stakeholders and fostering a security-first culture.

Qualifications

• Experience with Azure, AWS, and Google Cloud platforms.
• Proven ability to manage Enterprise-scale Entra environments.
• Experience with Zero Trust strategies and identity security.
• Proficiency in scripting and IaC tools (Terraform, ARM/CFN).
• Strong communication and collaboration skills.

Responsibilities

• Develop, monitor, and enforce cloud governance frameworks and policies.
• Ensure cloud infrastructure follows security best practices and compliance.
• Conduct security assessments and audits.
• Implement and manage IAM policies.
• Manage hardware security keys (YubiKeys).
• Monitor cloud usage and optimize costs.
• Provide reports on cloud costs and usage to leadership.
• Integrate governance policies into CI/CD and workflows.
• Provide guidance to development teams on new policies and procedures.
• Develop CI/CD pipelines for deploying governance policies.
• Respond to governance incidents and provide root-cause analysis.

Skills

Cloud platforms (Azure, AWS, GCP)

IAM management

Zero Trust security

Scripting & automation (Python, PowerS

Infrastructure as Code (Terraform, ARM

Cost management & optimization

SAML & OIDC

JIT privilege elevation

Security & compliance awareness

Communication

Education

Cloud certifications (e.g., AWS/AZURE/GOOGLE)

Tools

Terraform

ARM templates

CloudFormation

YubiKeys

Job description

About Delinea

Delinea is the identity security platform that continuously controls what AI agents, humans and machines can do and for how long. It extends privileged access management from the point of access to the moment of action, using just-in-time authorization to reduce standing privilege across on-premises, multi-cloud and short-lived infrastructure, without adding friction for legitimate users. Delinea provides visibility across every identity type, scores the risk each one carries, and preserves the context behind access decisions, making them auditable and defensible. It supports both static and epithelial access, letting teams apply Zero Standing Privilege where risk demands it without replacing existing infrastructure.

About Delinea

Delinea is the identity security platform that continuously controls what AI agents, humans and machines can do and for how long. It extends privileged access management from the point of access to the moment of action, using just-in-time authorization to reduce standing privilege across on-premises, multi-cloud and short-lived infrastructure, without adding friction for legitimate users. Delinea provides visibility across every identity type, scores the risk each one carries, and preserves the context behind access decisions, making them auditable and defensible. It supports both static and epithelial access, letting teams apply Zero Standing Privilege where risk demands it without replacing existing infrastructure.

Summary

We are seeking a skilled Senior Cloud Engineer with a focus on Cloud Governance to join our team. This role is critical in ensuring that our cloud infrastructure is managed effectively, securely, and in compliance with industry standards and company policies.

What You'll Do

• Develop, implement, monitor, and enforce cloud governance frameworks and policies to ensure compliance with regulatory requirements and industry best practices; We automate everything for efficiency
• Ensure cloud infrastructure adheres to security best practices and compliance

standards

• Conduct regular security assessments and audits
• Implement and manage identity and access management (IAM) policies
• Manage and implement hardware security keys (e.g., YubiKeys)
• Monitor cloud usage, costs, and implement strategies to optimize spending
• Provide regular reports and insights on cloud costs and usage trends to senior leadership and Finance
• Develop automated, seamless, and simple solutions to minimize repetitive manual operations
• Work closely with development and security teams to minimize restrictions that inhibit progress as well as ensuring cloud governance policies are integrated into workflows
• Provide communication, training, and guidance to development teams on new policies, procedures, and best practices for cloud resource management
• Develop CI/CD pipelines for deploying policies and other CSP management
• Respond to and resolve cloud governance-related incidents and issues; Provide root cause analysis when necessary

What You'll Bring

• Strong understanding of cloud platforms such as Azure, AWS, and Google Cloud
• Deep understanding and proven ability to effectively manage an Enterprise-scale Entra environment
• Implementation of Zero Trust security strategies and proven ability to protect identities, endpoints, data, applications, and infrastructure
• Proficiency in scripting and automation (e.g., Python, PowerShell, Bash) and infrastructure-as-code tools such as Terraform, Azure Resource Manager (ARM) templates, and/or CloudFormation Templates (CFT)
• Experience with large scale CSP (Cloud Service Provider) account and vendor relationship management
• Proven ability to align cloud environments with compliance standards (e.g., GDPR, ISO 27001, SOC2, FedRAMP, NIST)
• Expert in Identity and Access Management (IAM)
• Strong understanding and experience with SAML and OIDC for authentication
• Strong understanding and experience with JIT (Just-In-Time) privilege elevation
• Experience with cloud cost management tools and strategies and ability to analyze and report on cloud cost data
• Excellent communication skills, with the ability to explain complex concepts to non-technical stakeholders
• Strong teamwork and collaboration skills
• Strong analytical, problem-solving, and critical thinking skills
• Ability to handle multiple tasks and prioritize effectively
• Relevant cloud certifications (e.g. Microsoft 365 Certified: Administrator Expert, AWS Certified Solutions Architect, Microsoft Certified: Azure Solutions Architect, Google Cloud Professional Cloud Architect)
• Previous experience in a similar role focusing on cloud governance

Why work at Delinea?

• We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.
• We invest in people who are smart, self-motivated, and collaborative.
• What we offer in return is meaningful work, a culture of innovation and great career progression.

At Delinea, our core values are STRONG and guide our behaviors and success:

• Spirited - We bring energy and passion to everything we do
• Trust - We act with integrity and deliver on our commitments
• Respect - We listen, value different perspectives, and work as one team
• Ownership - We take initiative and follow through
• Nimble - We adapt quickly in a fast-changing environment
• Global - We embrace diverse people and ideas to drive better outcomes

We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.

We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.

Delinea is an Equal Opportunity and Affimative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.