Cloud Network Security Engineer

Quantum Technologies. LLC; Bellevue, Northern (WA, KY); Hybrid; USD 150,000 - 230,000; Full time

Job summary

Quantum Technologies LLC in Bellevue, WA is seeking a senior security engineer to lead IaC security scanning, firewall design, and risk management across cloud environments.

You will integrate Checkov, Terraform, and other IaC tools into CI/CD pipelines, develop policies, and ensure compliance with industry standards while working hands-on with Terraform, CloudFormation, and cloud firewall services.

Qualifications

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications like AWS/Azure/GCP Security Specialty, CISSP, CCSP preferred.

Responsibilities

• Integrate IaC security scanning tools into CI/CD pipelines.
• Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM).
• Develop custom policies for IaC scanning tools based on security standards.
• Design and implement native firewall rules across AWS, Azure, GCP.
• Perform rule optimization, risk-based tuning, and audits of firewall configurations.
• Align firewall and IaC policies with standards (NIST, CIS, ISO 27001) and support audits.

Skills

Cloud security

DevSecOps

Security tooling

Education

AWS/Azure/GCP Security Specialty

CISSP

CCSP

Terraform Associate

Tools

Terraform

CloudFormation

Checkov

Snyk IaC

Prisma Cloud

Aqua

Snyk

Terraform Validator

Job description

Job Description

IaC Security Scanning & Hardening

• Integrate IaC security scanning tools (e.g., Checkov, TFSec, Snyk IaC, Terraform Validator) into CI/CD pipelines.
• Analyze and remediate findings from IaC scans (Terraform, CloudFormation, ARM templates).
• Develop custom policies for IaC scanning tools based on organizational security standards.

Firewall Implementation & Tuning

• Design and implement native firewall rules across cloud platforms (AWS, Azure, GCP).
• Perform rule optimization, consolidation, and risk-based tuning to reduce attack surfaces.
• Conduct regular reviews and audits of firewall configurations and access controls.

Risk Management & Compliance

• Align firewall and IaC security policies with industry standards (NIST, CIS, ISO 27001).
• Support internal and external audits by providing documentation and evidence of controls.

Requirements

• 7+ years of experience in cloud security, network security, or DevSecOps.
• Hands-on experience with Terraform, CloudFormation, or other IaC tools.
• Deep understanding of cloud-native firewall services (AWS, Azure, GCP).
• Proficiency in security tools: Checkov, Prisma Cloud, Aqua, Snyk, etc.
• Certifications preferred: AWS/Azure/GCP Security Specialty, CISSP, CCSP, Terraform Associate.
• Proficiency in Automation by using Powershell, Bash and Python, etc.

QUANTUM TECHNOLOGIES LLC is an equal opportunity employer inclusive of female, minority, disability and veterans, (M/F/D/V). Hiring, promotion, transfer, compensation, benefits, discipline, termination and all other employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity, age, disability, national origin, citizenship/immigration status, veteran status or any other protected status. QUANTUM TECHNOLOGIES LLC will not make any posting or employment decision that does not comply with applicable laws relating to labor and employment, equal opportunity, employment eligibility requirements or related matters. Nor will QUANTUM TECHNOLOGIES LLC require in a posting or otherwise U.S. citizenship or lawful permanent residency in the U.S. as a condition of employment except as necessary to comply with law, regulation, executive order, or federal, state, or local government contract