Cloud Security & Automation Engineer

GranularTek LLC; Urbandale (IA); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Cloud certification stipends

Innovation days for R&D

Job summary

GranularTek LLC in Urbandale, IA is seeking a Cloud Security Engineer to architect and deploy security controls across AWS, Azure, and GCP using Terraform, CloudFormation, and Pulumi.

You will automate posture assessments, integrate vulnerability and IaC scanners into CI/CD, implement runtime protections, and build dashboards to monitor threats and compliance drift while collaborating with DevOps on GitOps and least-privilege enforcement.

Qualifications

• Must-have Terraform, AWS Security Hub, Azure Sentinel, CloudFormation, Snyk, Checkov, Wiz, CI/CD security integration.
• Preferred OCI or GCP security operations.
• Optional: Python or Bash scripting; Zero Trust Architecture.

Responsibilities

• Architect and deploy cloud-native security controls via Terraform, CloudFormation, and Pulumi.
• Automate security posture assessments using CIS benchmarks, AWS Config, Azure Policy, and GCP Security Health Analytics.
• Integrate vulnerability scanning (Snyk, Trivy, Qualys) and IaC scanning (Checkov, tfsec) into CI/CD pipelines.
• Implement runtime protection via CSPM, CWPP, and cloud-native EDR (Wiz, Lacework, Azure Defender).
• Build dashboards and alerting via Security Hub, Sentinel, and Grafana to monitor threats and compliance drift.
• Collaborate with DevOps to embed security into GitOps workflows and enforce least privilege at scale.

Tools

Terraform

AWS Security Hub

Azure Sentinel

CloudFormation

Snyk

Checkov

Wiz

CI/CD Security Integration

Python scripting

GCP Security Operations

Job description

About The Opportunity

A fast-scaling enterprise technology firm in the Cloud Security & DevSecOps space, we build automated, policy-driven security frameworks across AWS, Azure, and GCP environments. Our engineers design infrastructure-as-code guardrails, implement zero-trust architectures, and automate compliance for Fortune 500 clients—all while scaling secure operations at cloud speed.

About The Opportunity

A fast-scaling enterprise technology firm in the Cloud Security & DevSecOps space, we build automated, policy-driven security frameworks across AWS, Azure, and GCP environments. Our engineers design infrastructure-as-code guardrails, implement zero-trust architectures, and automate compliance for Fortune 500 clients—all while scaling secure operations at cloud speed.

Role & Responsibilities

• Architect and deploy cloud-native security controls (WAF, IAM, Secrets Manager) via Terraform, CloudFormation, and Pulumi.
• Automate security posture assessments using CIS benchmarks, AWS Config, Azure Policy, and GCP Security Health Analytics.
• Integrate vulnerability scanning (Snyk, Trivy, Qualys) and IaC scanning (Checkov, tfsec) into CI/CD pipelines.
• Implement runtime protection via CSPM, CWPP, and cloud-native EDR (Wiz, Lacework, Azure Defender).
• Build dashboards and alerting via Security Hub, Sentinel, and Grafana to monitor threats and compliance drift.
• Collaborate with DevOps to embed security into GitOps workflows and enforce least privilege at scale.

Skills & Qualifications

• Must-Have
  • Terraform
  • AWS Security Hub
  • Azure Sentinel
  • CloudFormation
  • Snyk
  • Checkov
  • Wiz
  • CI/CD Security Integration
• Preferred
  • OCI or GCP Security Operations
  • Python or Bash scripting
  • Zero Trust Architecture

Benefits & Culture Highlights

• Hybrid work model with flexible remote scheduling and quarterly in-office collabs.
• Quarterly cloud certification stipends and dedicated "innovation days" for R&D.
• Direct client impact with Fortune 500 security transformation projects.

Skills: prisma cloud a +,wiz,terraform