Cloud Security Engineer: Azure, Kubernetes & Zero Trust

Socket.dev; Philadelphia (Philadelphia County); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Competitive salary

Health insurance

Retirement plan

Profit sharing

Mentorship program

Comprehensive onboarding

Job summary

TherapyNotes LLC seeks an experienced Cloud Security Engineer to secure cloud infrastructure, containerized workloads, and IaC pipelines. The role emphasizes Azure, Kubernetes (AKS), CSPM, and Zero Trust within a HIPAA-regulated environment, contributing to incident response and governance.

Responsibilities include CSPM remediation, IAM management in Entra ID, and securing CI/CD with IaC tooling. Join a small security team driving robust cloud security operations.

Qualifications

• Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered.
• 5+ years of experience in cloud security engineering or related role.
• Deep experience securing cloud infrastructure and cloud-based applications (Azure preferred, AWS a plus).
• Hands-on network security and firewall controls knowledge.
• Experience with containerized workloads and Kubernetes environments (AKS).
• Experience with CSPM and remediating misconfigurations.
• Experience with IaC orchestration platforms (Terraform/OpenTofu).
• Experience with Microsoft Entra ID and JIT privileged access models.
• Experience with Zero Trust / SASE tooling and security frameworks (NIST, ISO 27001, CIS).
• Certifications such as CISSP/SSCP/Security+ or cloud security certs preferred.

Responsibilities

• Manage and secure cloud infrastructure and cloud-based applications, focusing on Azure.
• Secure containerized workloads and Kubernetes environments and perform image scanning.
• Own CSPM process and remediate misconfigurations across cloud environments.
• Secure IaC orchestration platforms with access control and secrets management.
• Manage identities in Entra ID with Conditional Access and entitlement management.
• Review network diagrams and connectivity changes for secure segmentation.
• Administer Zero Trust network access and edge security tooling.
• Oversee SIEM, DLP, E/XDR, and vulnerability management.
• Monitor alerts, respond to incidents, and participate in on-call rotation.
• Conduct threat analysis and risk evaluations; document findings for leadership.

Skills

Cloud security engineering

Kubernetes

Azure

Threat modeling

IAM

CSPM

Terraform

OpenTofu

Zero Trust

Incident response

Education

Bachelor's degree in information security or related field

Tools

AKS

Argo

Flux

Terraform

OpenTofu

Job description

TherapyNotes LLC seeks an experienced Cloud Security Engineer to secure cloud infrastructure, containerized workloads, and IaC pipelines. The role emphasizes Azure, Kubernetes (AKS), CSPM, and Zero Trust within a HIPAA-regulated environment, contributing to incident response and governance.

Responsibilities include CSPM remediation, IAM management in Entra ID, and securing CI/CD with IaC tooling. Join a small security team driving robust cloud security operations.