Cloud Compliance Engineer

Saab; Solna kommun; On-site; SEK 750,000 - 950,000; Full time

Job summary

Saab seeks a Cloud Compliance Engineer for enabling platforms to build secure, compliant cloud environments. You will embed Compliance as Code, Policy as Code, and automated control validation across development and operations, working with architects, developers, platform engineers, and security teams.

You will translate regulatory needs into reusable controls, automate validation, and integrate compliance into CI/CD and IaC workflows.

Qualifications

• A relevant academic degree or equivalent experience in IT security, cloud engineering, software or a related field.
• Proven experience securing AWS and/or Azure environments.
• Hands-on experience with Compliance as Code, Policy as Code, and Infrastructure as Code.
• Strong understanding of NIST, CSA CCM, ISO 27001, CIS Controls, and related security frameworks.
• Experience with Terraform, Bicep, CloudFormation, Azure Policy, AWS Config, OPA, Sentinel, or similar.
• Familiarity with DevSecOps and security integration within CI/CD pipelines.
• Knowledge of cloud governance, secure landing zones, and zero-trust principles.
• Experience in regulated or mission-critical environments is an advantage.
• Strong communication skills in both Swedish and English.

Responsibilities

• Translate regulatory and security requirements into reusable technical controls and cloud guardrails.
• Develop and maintain Compliance as Code and Policy as Code solutions.
• Automate compliance validation, evidence collection, monitoring, and reporting.
• Integrate continuous compliance into CI/CD pipelines and Infrastructure as Code workflows.
• Support compliance with standards such as NIST, ISO 27001 and NATO requirements.
• Contribute to risk assessments, audit readiness, and continuous authorization practices.

Skills

Compliance as Code

Policy as Code

Infrastructure as Code

DevSecOps

CI/CD security

Cloud security

Security governance

Zero-trust

Communication (Swedish & English)

Education

Relevant IT security/cloud engineering degree

Tools

Terraform

Bicep

CloudFormation

Azure Policy

AWS Config

OPA

Sentinel

Job description

Passionate about making ideas a reality? Join our welcoming world of tech and let your ideas soar.

Your role

As a Cloud Compliance Engineer for enabling platforms at Common Tech you will help build secure, resilient, and compliant cloud platforms by embedding security and compliance into development and operational processes. Working closely with architects, developers, platform engineers, and security teams, you will drive Compliance as Code, Policy as Code, and automated control validation to ensure secure-by-default cloud environments.

Key Responsibilities

• Translate regulatory and security requirements into reusable technical controls and cloud guardrails.
• Develop and maintain Compliance as Code and Policy as Code solutions.
• Automate compliance validation, evidence collection, monitoring, and reporting.
• Integrate continuous compliance into CI/CD pipelines and Infrastructure as Code workflows.
• Support compliance with standards such as NIST, ISO 27001 and NATO requirements.
• Contribute to risk assessments, audit readiness, and continuous authorization practices.

Your Profile

You are a proactive and analytical engineer who believes compliance should be automated and embedded into platforms, enabling teams to deliver secure and compliant solutions by design.

You also have

• A relevant academic degree or equivalent experience in IT security, cloud engineering, software or a related field.
• Proven experience securing AWS and/or Azure environments.
• Hands-on experience with Compliance as Code, Policy as Code, and Infrastructure as Code.
• Strong understanding of NIST, CSA CCM, ISO 27001, CIS Controls, and related security frameworks.
• Experience with tools such as Terraform, Bicep, CloudFormation, Azure Policy, AWS Config, OPA, Sentinel, or similar.
• Familiarity with DevSecOps and security integration within CI/CD pipelines.
• Knowledge of cloud governance, secure landing zones, and zero-trust principles.
• Experience in regulated or mission-critical environments is an advantage.
• Strong communication skills in both Swedish and English.

This position requires that you pass a security vetting based on the current regulations around/of security protection. For positions requiring security clearance additional obligations on citizenship may apply.

What You Will Be Part Of

Explore a wealth of possibilities. Take on challenges, create smart inventions, and grow beyond. This is a place for curious minds, brave pioneers, and everyone in between. Together, we achieve the extraordinary, each bringing our unique perspectives. Your part matters.

Saab is a leading defense and security company with an enduring purpose, to help nations keep their people and society safe. Empowered by its 28,000 talented people, Saab constantly pushes the boundaries of technology to create a safer and more sustainable world.

Saab designs, manufactures and maintains advanced systems in aeronautics, weapons, command and control, sensors and underwater systems. Saab is headquartered in Sweden. It has major operations all over the world and is part of the domestic defense capability of several nations. Read more about us here