Cloud Security Engineer

Talentmanagementsolution; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

Компания Jonas Software ищет инженера по облачной безопасности для защиты облачных платформ, включая Azure и Kubernetes, обеспечения безопасной архитектуры и процессов. Ваша работа будет охватывать безопасность данных, CI/CD, и жизненный цикл секретов, а также поддержку безопасного внедрения ИИ.

Требуется практический опыт в защите облачных сред, навыки в IAM, сетях и управление инцидентами. В должности ожидается сотрудничество с командами R&D и облачными операциями для внедрения безопасных

Qualifications

• Практический опыт защиты Azure в промышленной среде.
• Понимание IAM, сетей, Kubernetes/контейнеров, ОС, управления уязвимостями и инцидент-ответа.
• Опыт скриптов, policy-as-code, инфраструктурной автоматизации или автоматизации безопасности.
• Понимание безопасной разработки и деплоймента, включая хранение секретов и безопасность пайплайнов.

Responsibilities

• Реализация и поддержание мер безопасности по Azure, идентификации, сетям, Kubernetes, контейнерам, серверам, данным и CI/CD пайплайнам.
• Обзор проектов дизайна и изменений на предмет безопасности с предложениями по улучшениям.
• Автоматизация безопасной конфигурации, обнаружения уязвимостей, обеспечения доказательств и повторяемого исправления.
• Поддержка жизненного цикла секретов, ключей, сертификатов и привилегированного доступа.
• Мониторинг сигналов безопасности, расследование инцидентов и приоритизация исправлений.
• Документирование рисков и руководств по AI-безопасности, соответствие ISO27001/PCI DSS/цифровая гигиена.

Skills

Azure security

IAM & networking

Kubernetes

Containers

Vulnerability management

Incident response

Scripting

Policy as code

Infra automation

Secure SDLC

Threat modelling

Tools

Azure

Kubernetes

Job description

Задачи:

Cloud Security Engineer Cloud Security Engineering Implement and maintain security controls across Azure subscriptions, identities, networks, Kubernetes, containers, servers, data services, endpoints and CI/CD pipelines. Review cloud and platform designs, configuration and change proposals, identifying practical improvements before risk reaches production. Automate secure configuration, vulnerability detection, policy checks, evidence collection and repeatable remediation where appropriate. Support secrets, key, certificate, privileged-access and service-account lifecycle management. Detection, Response and Vulnerability Management Monitor security signals and investigate suspicious activity, vulnerabilities, misconfiguration and control failures. Prioritise remediation using exploitability, exposure, business impact and compensating controls rather than severity labels alone. Support security incident response, evidence preservation, root-cause analysis and completion of corrective actions. Maintain clear security findings, owners, due dates, exceptions and risk acceptance records. AI and Application Security Threat model AI-enabled services and operational agents, including data leakage, prompt injection, over-permission, unsafe actions, supplier risk and inadequate human oversight. Use approved AI tools to support security analysis, query development, evidence review and incident investigation while validating outputs and protecting sensitive data. Work with R&D and Data teams to embed secure-by-design controls into the AI-DLC, data flows, APIs and deployment patterns. Define and test guardrails for AI access to production systems, credentials, logs and customer information. Compliance and Security Culture Provide technical evidence and remediation support for ISO 27001, PCI DSS, Cyber Essentials Plus, GDPR and customer assurance activity. Create practical standards, runbooks and guidance and coach engineers on secure cloud and AI-enabled working. Report material risks and trends clearly to the Cloud Operations Manager, Compliance Manager and relevant owners.

Требования:

Hands-on experience securing Azure or another major cloud platform in a production environment. Practical knowledge of identity and access management, networking, Kubernetes or containers, operating systems, vulnerability management, logging and incident response. Ability to investigate and prioritise technical security findings and implement or coordinate effective remediation. Experience with scripting, policy-as-code, infrastructure automation or security automation. Understanding of secure development and deployment practices, including secrets and pipeline security. Clear documentation and communication of technical risk to different audiences. Azure security, Kubernetes security or recognised cyber-security certification. Experience of ISO 27001, PCI DSS, Cyber Essentials Plus or regulated SaaS environments. Experience threat modelling AI-enabled systems, APIs or agentic automation.

PERSONAL ATTRIBUTES

• High ownership, sound judgment and a bias toward solving problems rather than moving them between teams.
• Curious and adaptable, with a practical commitment to continuous learning and responsible AI adoption.
• Systematic, evidence-led problem solving and attention to detail.
• Clear communication with both technical and non-technical colleagues.
• Collaborative working style and willingness to share knowledge, review work and support others.

Business Unit: Gladstone Software Scheduled Weekly Hours: 37.5 Number of Openings Available: 1 Worker Type: Regular

Career Site: More About Jonas Software: Jonas Software is a leading provider of enterprise management software solutions, serving a wide range of vertical markets including hospitality, healthcare, construction, education, personal care, fitness, leisure, moving and legal services, to name a few. Within these markets, Jonas is comprised of over 65 distinct brands, each a respected leader in its domain. Jonas' vision is to be the branded global leader across these verticals and to be recognized by customers and industry stakeholders as the trusted provider of "Software for Life." We are committed to technology, product innovation, quality, and exceptional customer service. Jonas Software supports over 60,000 customers in more than 30 countries. We employ over 6,000 skilled professionals, including industry experts and technology specialists. Across our broader network, we support a global workforce of more than 30,000 employees. Headquartered in Canada, Jonas Software has a global footprint with offices around the world. We’re a 100% owned subsidiary of Constellation Software Inc., based in Toronto, publicly listed on the TSX (CSU.TO), and a member of the S&P/TSX 60 Index.

IS THIS YOU?

Условия:

The Cloud Security Engineer protects Gladstone's cloud platforms and services through secure design, configuration, monitoring, automation and evidence-led remediation. The role works across Azure, Kubernetes, networks, identity, workloads, data and delivery pipelines, and supports the safe adoption of AI-enabled systems and operational tooling. AI-ENABLED WORKING AI-enabled working is a core expectation of this role. The role holder will use approved AI tools and automation to improve quality, speed, insight and consistency; validate outputs before acting on them; protect customer, employee and company data; and share effective practices with colleagues. Performance will be assessed through outcomes such as quality, reliability, cycle time, risk control and knowledge transfer - not simply the volume of AI-generated output or frequency of tool use.