Cloud Security Architect/Engineer

Tenth Revolution Group; United States; Remote; USD 149,000 - 182,000; Full time

Benefits offered by this job

Remote work

Travel to clients

Bonus & benefits

Job summary

Tenth Revolution Group is seeking an experienced Cloud Security Engineer to join our growing cybersecurity and cloud consulting practice. You will work directly with enterprise clients to design and implement secure cloud environments across Azure, AWS, and/or GCP.

The ideal candidate combines hands-on cloud security engineering with architecture and client-facing consulting experience, delivering secure cloud solutions and guiding security transformations across modern multi-cloud ecosystems.

Qualifications

• 5+ years of cybersecurity, cloud engineering, infrastructure, or architecture experience.
• 2+ years of hands-on cloud security experience with Azure, AWS, and/or GCP.
• Strong experience with IAM, Zero Trust, cloud networking, workload protection, data security, and security monitoring.
• Experience with Terraform/IaC, DevSecOps, CNAPP/CSPM, SIEM, and cloud-native security tooling.
• Understanding of security frameworks such as NIST, CIS, ISO 27001, or CSA CCM.
• Strong communication skills with experience working directly with enterprise clients and technical stakeholders.

Responsibilities

• Design secure cloud architectures across Azure, AWS, GCP, hybrid, and multi-cloud environments.
• Develop cloud security reference architectures, landing zones, guardrails, and Zero Trust security patterns.
• Design and implement security controls across IAM, networking, encryption, data protection, logging, vulnerability management, and threat detection.
• Implement cloud-native security and CNAPP/CSPM technologies such as Microsoft Defender for Cloud, Wiz, Prisma Cloud, AWS Security Hub, or similar platforms.
• Secure containers, Kubernetes, cloud workloads, APIs, and cloud-native applications.
• Integrate security into CI/CD and DevSecOps pipelines using Terraform, GitHub Actions, Azure DevOps, or similar technologies.
• Conduct cloud security assessments and develop remediation and security transformation roadmaps.
• Lead client workshops and translate technical risks into practical security recommendations.
• Partner with cloud, infrastructure, application, data, and cybersecurity teams to deliver enterprise security solutions.

Skills

Cloud security engineering

Client communication

Security architecture

Tools

Terraform

IaC

GitHub Actions

Azure DevOps

Job description

Location: Remote

Work Pattern: Remote with 20% travel to clients

Salary: Up to 165,000 base + bonus & benefits

Role Type: Permanent

Cloud Security Engineer

Role Overview

We are seeking an experienced Cloud Security Engineer to join a growing cybersecurity and cloud consulting practice. This role will work directly with enterprise clients to design and implement secure cloud environments across Azure, AWS, and/or GCP.

The ideal candidate combines hands‑on cloud security engineering with architecture and client‑facing consulting experience.

Responsibilities

• Design secure cloud architectures across Azure, AWS, GCP, hybrid, and multi-cloud environments.
• Develop cloud security reference architectures, landing zones, guardrails, and Zero Trust security patterns.
• Design and implement security controls across IAM, networking, encryption, data protection, logging, vulnerability management, and threat detection.
• Implement cloud-native security and CNAPP/CSPM technologies such as Microsoft Defender for Cloud, Wiz, Prisma Cloud, AWS Security Hub, or similar platforms.
• Secure containers, Kubernetes, cloud workloads, APIs, and cloud-native applications.
• Integrate security into CI/CD and DevSecOps pipelines using Terraform, GitHub Actions, Azure DevOps, or similar technologies.
• Conduct cloud security assessments and develop remediation and security transformation roadmaps.
• Lead client workshops and translate technical risks into practical security recommendations.
• Partner with cloud, infrastructure, application, data, and cybersecurity teams to deliver enterprise security solutions.

Qualifications

• 5+ years of cybersecurity, cloud engineering, infrastructure, or architecture experience.
• 2+ years of hands‑on cloud security experience with Azure, AWS, and/or GCP.
• Strong experience with IAM, Zero Trust, cloud networking, workload protection, data security, and security monitoring.
• Experience with Terraform/IaC, DevSecOps, CNAPP/CSPM, SIEM, and cloud-native security tooling.
• Understanding of security frameworks such as NIST, CIS, ISO 27001, or CSA CCM.
• Strong communication skills with experience working directly with enterprise clients and technical stakeholders.

Preferred

• Previous consulting or professional services experience.
• Experience with enterprise cloud migrations and security transformation programs.
• Knowledge of Kubernetes/container security and platforms such as AKS, EKS, or GKE.
• Certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, Cybersecurity Architect Expert, or Google Professional Cloud Security Engineer.

We are looking for someone who can operate comfortably between architecture and hands‑on engineering, helping clients assess their current environments, design secure cloud solutions, and implement the technologies and controls needed to protect them.