Cloud Security Engineer

Randstad Digital; Sacramento (CA); Hybrid; USD 122,000 - 140,000; Full time

Benefits offered by this job

Medical

Prescription

Dental

Vision

AD&D

Life insurance

Short-term disability

401K

Job summary

Randstad Digital seeks a senior cybersecurity architect in Sacramento, CA to advance cloud security architecture and refine safeguards for legacy systems. The role operates in a hybrid setup with strong emphasis on governance and risk management.

Hybrid work arrangement (3 days on-site / 2 days remote) and ongoing collaboration with software, IT, and data teams to embed security early in projects across AWS, Azure, and Google Cloud Platform.

Qualifications

• 10 years in progressive cybersecurity roles securing enterprise infrastructure and Azure cloud environments.
• 5 years of direct experience across AWS, Google Cloud Platform, and Azure cloud platforms.
• Experience with NIST CSF, ISO 27001, PCI DSS, and CCPA compliance.

Responsibilities

• Architect, deploy, and administer security measures across multi-cloud infrastructure (AWS, Azure, GCP).
• Embed security controls into system architecture and migration pipelines for safe cloud transitions.
• Oversee cloud-native security tools and SIEM capabilities across platforms.
• Lead threat modeling, security validations, and risk-based advisory across software teams.
• Configure and maintain identity controls using Azure AD and RBAC across landscapes.
• Lead incident response, containment, and post-incident analysis for security events.

Skills

AWS

Azure AD

SIEM

Threat modeling

Python

PowerShell

Education

High School Diploma or GED

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related discipline (preferred)

Tools

AWS Security Hub

Azure Security Center/ Defender for Cloud

CSPM tools

EDR

Job description

job summary:

Position Overview Working with minimal supervision, this role drives the continuous advancement of the organization’s cybersecurity architecture. The focus is on expanding and refining security protocols across cloud environments while ensuring robust safeguards remain in place for legacy enterprise systems.

Work Arrangement: Hybrid (3 days on-site / 2 days remote weekly).

location: Sacramento, California

job type: Permanent

salary: $122,000 – 140,000 per year

work hours: 8am to 5pm

education: High School

responsibilities:

• Cloud Safeguards & Governance: Architect, deploy, and administer security measures across multi-cloud infrastructure (AWS, Azure, Google Cloud Platform). Enforce proper configurations, manage access policies, and establish cloud security baselines, guardrails, and compliance standards (including CSPM, network security, identity management, and data protection).
• Cloud Transformation: Embed proactive security controls into system architecture, migration pipelines, and deployment frameworks to facilitate safe transitions from legacy on-premise setups to cloud ecosystems.
• Security Administration & Tooling: Oversee cloud-native security utilities (such as AWS Security Hub, Azure Security Center / Defender for Cloud, and related platform tools).
• Subject Matter Expertise & Advisory: Function as the primary technical advisor for cybersecurity. Conduct design evaluations, lead threat modeling, perform security validations, and partner across software engineering, IT, and data teams to incorporate security early in the project lifecycle.
• Identity & Access Management (IAM): Configure and maintain robust identity controls using Azure Active Directory and modern access solutions (enforcing least-privilege principles, Role-Based Access Control, and Conditional Access policies) across enterprise and cloud landscapes.
• Threat Detection & Incident Handling: Utilize SIEM tools and cloud telemetry to enhance threat monitoring and detection capabilities. Lead containment, root-cause investigations, and post-incident analysis during security events.
• Automation & Process Improvement: Streamline security monitoring, alerting, and incident response operations by creating automated workflows and scripts (e.g., Python, PowerShell).
• Metrics, Risk & Compliance: Define and monitor key performance indicators to assess overall posture. Assist with security audits and maintain alignment with industry benchmarks and regulatory mandates (e.g., NIST CSF, ISO 27001, PCI-DSS, CCPA).
• Risk Mitigation & Remediation: Contribute to vulnerability management programs, enterprise risk reduction efforts, and disaster recovery / business continuity planning for cloud services.
• Documentation & Leadership: Draft and maintain cloud security guidelines, standard operating procedures, and technical documentation while staying current on emerging threats and industry trends.

qualifications:

• Experience:
  • o 10 years in progressive cybersecurity/information security roles, featuring hands‑on expertise securing enterprise infrastructure and Azure cloud environments.
  • o 5 years of direct technical experience across AWS, Google Cloud Platform, and Azure cloud platforms.
• Technical Proficiency:
  • o Demonstrated background in cloud security controls, IAM framework design, endpoint security, device compliance, SIEM, EDR, and CSPM solutions.
  • o Practical experience with automation and scripting languages (such as PowerShell or Python).
  • o Hands‑on involvement in cloud migration initiatives, vulnerability assessment, threat detection, and incident remediation.
• Regulatory Knowledge:

  Direct experience operating security programs aligned with standards like NIST CSF, ISO 27001, PCI DSS, and CCPA.

• Soft Skills:

  Exceptional analytical and problem‑solving skills; proven track record of converting risk findings into actionable operational guidance; collaborative mindset with strong cross‑functional communication abilities.

• Education:
  • o High School Diploma or GED required.
  • o Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline (or equivalent practical experience) preferred.

skills:

AWS,AWS Security,Azure AD,Azure Security Center,Cloud,cloud security,cloud security posture,cloud environments,cloud systems,native cloud,disaster recovery,Google Cloud Platform,Azure,NIST CSF,PCI DSS,RBAC,least privilege,SIEM,vulnerability management,access controls,Conditional Access,architecture,business continuity planning,data protection,project delivery,secure configurations,ISO 27001,incident reviews,incident response activities,infrastructure,metrics,risk remediation,organizational goals,ensure compliance,regulatory frameworks,investigation,risks,security,security audits,security controls,deployment processes,system design,telemetry,threat modeling

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants.

Pay offered to a successful candidate will be based on several factors including the candidate’s education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short‑term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.

Qualified applicants in San Francisco with criminal histories will be considered for employment in accordance with the San Francisco Fair Chance Ordinance.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

We will consider for employment all qualified Applicants, including those with criminal histories, in a manner consistent with the requirements of applicable state and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance.