Cloud Network Security Engineer

Ethereum Technologies LLC; Bellevue (WA); On-site; USD 160,000 - 230,000; Full time

Job summary

Ethereum Technologies LLC in Bellevue, WA is seeking a senior Security Architect to lead IaC security scanning, firewall design, and risk management initiatives across AWS, Azure, and GCP. You will integrate Checkov, Terraform, and other IaC tools in CI/CD pipelines, analyze findings, and develop policy-based controls.

The role requires 7+ years in cloud or DevSecOps, strong scripting skills (PowerShell, Bash, Python), and relevant certifications.

Qualifications

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
• Proficiency in Automation by using Powershell, Bash and Python, etc.

Responsibilities

• Integrate IaC security scanning tools into CI/CD pipelines.
• Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).
• Develop custom policies for IaC scanning tools based on organizational security standards.
• Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP).
• Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces.
• Conduct regular reviews and audits of firewall configurations and access controls.
• Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).
• Support internal and external audits by providing documentation and evidence of controls.

Skills

Cloud security

DevSecOps

Terraform

CloudFormation

IaC security

Powershell

Bash

Python

CI/CD

Firewall design

Education

AWS/Azure/GCP Security Specialty

CISSP

CCSP

Terraform Associate

Tools

Checkov

Prisma Cloud

Aqua

Snyk

Job description

Job Description-

IAC Security Scanning & Hardening

Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines.

Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).

Develop custom policies for IaC scanning tools based on organizational security standards.

Firewall Implementation & Tuning

Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP).

Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces.

Conduct regular reviews and audits of firewall configurations and access controls.

Risk Management & Compliance

Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).

Support internal and external audits by providing documentation and evidence of controls.

Requirements

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
• Proficiency in Automation by using Powershell, Bash and Python, etc.

ETHEREUM TECHNOLOGIES LLC is an equal opportunity employer inclusive of female, minority, disability and veterans, (M/F/D/V). Hiring, promotion, transfer, compensation, benefits, discipline, termination and all other employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, age, disability, national origin, citizenship/immigration status, veteran status or any other protected status. ETHEREUM TECHNOLOGIES LLC will not make any posting or employment decision that does not comply with applicable laws relating to labor and employment, equal opportunity, employment eligibility requirements or related matters. Nor will ETHEREUM TECHNOLOGIES LLC require in a posting or otherwise U.S. citizenship or lawful permanent residency in the U.S. as a condition of employment except as necessary to comply with law, regulation, executive order, or federal, state, or local government contract