Cloud Network Security Engineer

Cloud Analytics Technologies, LLC; Bellevue (WA); On-site; USD 100,000 - 130,000; Full time

Job summary

A cloud security company based in Bellevue, Washington is seeking an experienced security professional to integrate IaC security tools within CI/CD pipelines. Responsibilities include analyzing security scans, developing policies, and implementing cloud-native firewall rules across major platforms like AWS, Azure, and GCP. Ideal candidates will have over 7 years in cloud security or DevSecOps, in-depth tool proficiency, and relevant certifications. The role promotes a diverse and inclusive work environment.

Qualifications

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.

Responsibilities

• Integrate IaC security scanning tools into CI/CD pipelines.
• Analyze and remediate findings from IaC scans.
• Develop custom policies for IaC scanning tools.
• Design and implement native firewall rules across cloud platforms.
• Perform rule optimization and risk-based tuning.
• Conduct regular reviews and audits of firewall configurations.
• Align policies with industry standards.
• Support internal and external audits.

Skills

Cloud security

Network security

DevSecOps

Terraform

CloudFormation

Automation with PowerShell

Automation with Bash

Automation with Python

Security tools proficiency

Education

AWS/Azure/GCP Security Specialty

CISSP

CCSP

Terraform Associate

Job description

Responsibilities

• Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines.
• Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).
• Develop custom policies for IaC scanning tools based on organizational security standards.
• Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP).
• Perform rule optimization, consolidation, and risk‑based tuning to reduce attack surfaces.
• Conduct regular reviews and audits of firewall configurations and access controls.
• Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).
• Support internal and external audits by providing documentation and evidence of controls.

Qualifications

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands‑on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud‑native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
• Proficiency in automation using PowerShell, Bash and Python.

Equal Opportunity Employer

CLOUD ANALYTICS TECHNOLOGIES LLC is an equal opportunity employer inclusive of female, minority, disability and veterans (M/F/D/V). Hiring, promotion, transfer, compensation, benefits, discipline, termination and all other employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, age, disability, national origin, citizenship/immigration status, veteran status or any other protected status. CLOUD ANALYTICS TECHNOLOGIES LLC will not make any posting or employment decision that does not comply with applicable laws relating to labor and employment, equal opportunity, employment eligibility requirements or related matters. Nor will CLOUD ANALYTICS TECHNOLOGIES LLC require in a posting or otherwise U.S. citizenship or lawful permanent residency in the U.S. as a condition of employment except as necessary to comply with law, regulation, executive order, or federal, state, or local government contract.