Cloud Security Engineer

NAIC; Kansas City (MO); Hybrid; USD 107,000 - 142,000; Full time

Job summary

NAIC in Kansas City is offering an exciting opportunity for a Cloud Security Engineer. The role involves defining and maintaining security architecture in cloud environments, working closely with Cloud Engineering and DevOps teams to ensure security compliance and best practices.

The successful candidate will need a Bachelor's degree and 5+ years of relevant experience, with a salary range of $107,000 – $142,000 based on qualifications.

Qualifications

• 5+ years of experience in information security with focus on cloud.
• Hands-on experience securing cloud environments.
• Strong knowledge of cloud identity management and network security.

Responsibilities

• Design and implement cloud security architectures across platforms.
• Develop cloud security standards and documentation.
• Collaborate with teams on container security tooling and CI/CD.

Skills

Cloud Security Architecture

Kubernetes Security

AWS Security

CI/CD Security

Infrastructure-as-Code

Education

Bachelor's degree in computer-related field

Tools

AWS

Terraform

CloudFormation

Job description

Job Description

The Security, Risk, and Compliance division of the National Association of Insurance Commissioners (NAIC) has an exciting opportunity for a Cloud Security Engineer. This position is responsible for defining, implementing, and maintaining the security architecture of the organization’s cloud and cloud-native environments and partners closely with Cloud Engineering, DevOps, Compliance, and Risk teams to ensure cloud platforms—including Kubernetes and emerging AI‑enabled technologies—are designed and operated securely, in alignment with regulatory requirements, security best practices, and organizational risk tolerance. This is a full‑time hybrid position in a positive and flexible environment. Residency within 100 miles of the Kansas City office is required.

Responsibilities

• Design, implement, and maintain secure cloud architectures across IaaS, PaaS, and SaaS platforms (e.g., AWS, Azure, OCI), including security guardrails and standards.
• Develop and maintain cloud security standards and documentation and ensure cloud architecture designs align with said standards and risk management requirements.
• Lead security architecture and controls for containerized and Kubernetes‑based workloads, including cluster hardening and secure configuration, workload isolation and network policies, secrets management and key rotation, and container image security and supply chain integrity.
• Collaborate with DevOps teams on container security tooling, runtime protection, and secure CI/CD pipelines.
• Contribute to the development and architecture of an organizational AI security strategy, including governance, acceptable use, and risk controls.
• Translate regulatory and compliance requirements (e.g., SOC2, NIST, ISO27001, GovRAMP) into actionable cloud security controls.
• Evaluate and implement cloud security posture management (CSPM), container security, CI/CD security, and cloud‑native security tools.

Minimum Qualifications

• Bachelor's degree (B.A. or B.S.) in a computer‑related field and 5+ years of experience in information security, with significant focus on cloud environments, or equivalent combination of education and technical experience.
• Hands‑on experience securing AWS (Azure and OCI experience are a plus).
• Practical experience securing Kubernetes and containerized workloads.
• Familiarity with infrastructure‑as‑code and CI/CD security concepts.
• Strong working knowledge of cloud IAM and identity federation, network security (VPCs/VNETs, firewalls, security groups), encryption, key management, and secrets handling.
• Ability to communicate complex security concepts clearly to technical and non‑technical audiences.

Preferred Qualifications

• Experience working in regulated or compliance‑driven environments (e.g., SOC2, GovRAMP, PCI, HIPAA).
• Familiarity with frameworks such as NIST800‑53, CIS Benchmarks, or Zero Trust architectures.
• Experience evaluating or securing AI/ML platforms or SaaS tools.
• Experience with CSPM, container security, or cloud‑native security tools (vendor‑agnostic).
• Relevant certifications (AWS Security Specialty, CCSK, CKS, CISSP) are a plus.

Systems & Technology Requirements

• AWS, Kubernetes, and container technologies.
• Infrastructure‑as‑code tools (e.g., Terraform, CloudFormation, ARM, GitLab).
• Windows, Linux, and macOS endpoints.
• Identity and access management (IAM/IdP).

Other Requirements

• Residency within 100 miles of the Kansas City office is required.
• Travel requirements: does not require overnight business travel.
• This is a full‑time hybrid position in a positive and flexible environment.

Compensation

$107,000 – $142,000, commensurate with education and experience.

Equal Opportunity Employment

The NAIC is proud to be an Equal Opportunity Employer. Applicants for all positions are considered without regard to age, race, creed, color, religion, sex, sexual orientation, gender identity or expression, national origin or ancestry, marital status, pregnancy, genetic information, military or veteran status, disability, or any other basis protected by applicable law.