Cloud Compliance Engineer: Automate Security & Policy

Saab; Solna kommun; On-site; SEK 700,000 - 980,000; Full time

Job summary

Saab is seeking a Cloud Compliance Engineer to help build secure, compliant cloud platforms by embedding governance into development and operations. You will work with architects, developers, platform engineers, and security teams to drive Compliance as Code, Policy as Code, and automated control validation.

You will translate regulatory requirements into cloud guardrails, develop compliance solutions, and automate evidence collection and reporting.

Qualifications

• Bachelor's degree or equivalent experience in IT security, cloud engineering, software or related field.
• Experience securing AWS and/or Azure environments.
• Hands-on with Compliance as Code, Policy as Code, and Infrastructure as Code.
• Strong understanding of security frameworks such as NIST, ISO 27001, CSA CCM, CIS Controls.

Responsibilities

• Translate regulatory and security requirements into reusable technical controls and cloud guardrails.
• Develop and maintain Compliance as Code and Policy as Code solutions.
• Automate compliance validation, evidence collection, monitoring, and reporting.
• Integrate continuous compliance into CI/CD pipelines and IaC workflows.
• Support compliance with standards such as NIST, ISO 27001 and NATO requirements.
• Contribute to risk assessments, audit readiness, and continuous authorization practices.

Skills

Compliance as Code

Policy as Code

Infrastructure as Code

Cloud security

DevSecOps

Zero-trust

AWS/Azure security

Communication (EN/SE)

Education

Relevant academic degree or equivalent IT security/cloud engineering

Tools

Terraform

Bicep

CloudFormation

Azure Policy

AWS Config

OPA

Sentinel

Job description

Saab is seeking a Cloud Compliance Engineer to help build secure, compliant cloud platforms by embedding governance into development and operations. You will work with architects, developers, platform engineers, and security teams to drive Compliance as Code, Policy as Code, and automated control validation.

You will translate regulatory requirements into cloud guardrails, develop compliance solutions, and automate evidence collection and reporting.