Cloud Security Engineer – Hybrid

VIVA USA INC; Minneapolis (MN); Hybrid; USD 140,000 - 190,000; Full time

Job summary

VIVA USA INC. is seeking a Cloud Security Engineer to lead remediation across Google Cloud Platform, Azure, and AWS. You will develop secure deployment patterns, implement policy-as-code, and modernize CSPM capabilities, aligning with enterprise security standards.

The role emphasizes collaboration with cloud engineering, infrastructure, and security teams to reduce operational risk through automation and scalable solutions.

Qualifications

• Bachelor's degree or equivalent experience.
• 5 years of Cloud Engineering in enterprise environments.
• Ability to resolve complex technical issues independently.
• Ability to develop scalable remediation strategies with low operational risk.
• Strong communication and collaboration in Agile environments.

Responsibilities

• Define Secure Cloud Deployment Patterns with reference architectures for GCP, Azure, and AWS.
• Modernize CSPM capabilities and implement enterprise CSPM across public cloud footprint.
• Policy-as-Code design and maintenance using Open Policy Agent to enforce standards.
• Collaborate with cloud engineering, infrastructure, and security teams to remediate risks.
• Develop scalable automation and security controls to improve governance and reduce risk.

Skills

Google Cloud Platform

Terraform

Policy-as-Code

Wiz CSPM

CI/CD

Python scripting

Open Policy Agent (OPA)

Cloud security

Cloud networking

Azure/AWS

Education

Bachelor's degree in Computer Science or related field

Tools

Open Policy Agent (OPA)

Terraform

Wiz

GitHub Actions

Atlantis

Job description

Title: Cloud Security Engineer – Hybrid

Mandatory skills:

• Cloud Engineering,
• Google Cloud Platform,
• traditional infrastructure, automation, infrastructure-as-Code, Scripting, CI/CD,
• writing automation pipelines, scripts, writing production Terraform code,
• cloud networking, SDN, core infrastructure components, compute, storage, databases, IAM,
• Azure, AWS, Github, Atlantis, Cloud Security, Mix of infrastructure, security,
• cloud footprint, cloud resources, backend systems, networking, data engineering, security solutions,
• Cloud Issues Remediation, mitigation plans, Terraform repositories, mismanaged cloud secrets, cloud resources

Description:

Cloud Security Engineer — Risk Reduction

Role Summary

We are looking for an experienced Cloud Security Engineer to drive the remediation of our public cloud platforms (Google Cloud Platform, Azure, and AWS). In this role, you will help improve client”s cloud security posture by developing secure cloud deployment patterns, implementing policy-as-code, and modernizing our Cloud Security Posture Management (CSPM) capabilities. You will work at the intersection of cloud infrastructure, backend systems, networking, and security engineering to deliver scalable, automated security solutions across the enterprise.

Key Responsibilities

• Define Secure Cloud Deployment Patterns: Develop and publish security standards and reference architectures for common cloud deployment patterns in Google Cloud Platform, Azure, and AWS. Build reusable Terraform modules and automation scripts to enable secure adoption by engineering teams.
• Modernize CSPM Capabilities: Evaluate, test, and implement Cloud Security Posture Management (CSPM) solutions, with a strong focus on Wiz, and partner with key stakeholders to build an enterprise‑ready CSPM environment across our public cloud footprint.
• Policy-as-Code: Design, develop, test, and maintain enterprise Policy-as-Code libraries using Open Policy Agent (OPA) to enforce secure cloud deployment standards and automate compliance across cloud environments.
• Collaborate with cloud engineering, infrastructure, and security teams to identify and remediate cloud security risks.
• Develop scalable automation and security controls that improve cloud governance and reduce operational risk.

Qualifications

• Bachelor”s degree in Computer Science, Information Technology, or related field (or equivalent experience).
• 5 years of Cloud Engineering experience in enterprise environments.
• Strong analytical and problem-solving skills with the ability to resolve complex technical issues independently.
• Ability to understand existing cloud architectures and develop scalable remediation strategies while minimizing operational risk.
• Strong communication and collaboration skills with experience working in Agile environments.
• Demonstrated commitment to continuous learning and staying current with evolving cloud and security technologies.

Required Technical Skills

• Current Google Cloud Professional (Google Cloud Platform) Certification is required.
• 5 years of hands‑on engineering experience supporting Google Cloud Platform (Google Cloud Platform).
• 3 years of experience developing and maintaining production Terraform code in complex enterprise environments.
• Proven experience writing, testing, and maintaining Policy-as-Code using Open Policy Agent (OPA) to enforce cloud security standards. Experience building reusable policy libraries is required.
• Hands‑on experience with Wiz for Cloud Security Posture Management (CSPM), including identifying, prioritizing, and remediating cloud security risks.
• Strong scripting and automation experience using Python, Bash, or similar languages within CI/CD pipelines.
• Experience designing secure cloud deployment patterns and infrastructure automation.
• Strong understanding of cloud and on‑premises networking, IAM, compute, storage, databases, and software‑defined networking (SDN).
• Experience securing enterprise cloud environments and implementing cloud security best practices.

Preferred Qualifications

• Experience supporting Azure and/or AWS environments.
• Experience with GitHub, GitHub Actions, or Atlantis.
• Combination of infrastructure engineering and cloud security experience.
• Experience evaluating or implementing enterprise cloud security tooling and security automation frameworks.

Skills Description

• Google Cloud Platform Professional Certification (required)
• Hands-on experience writing Policy-as-Code like OPA/Rego, sentinel or CEL
• Hands‑on Wiz experience (required)

Notes:

Hybrid

VIVA USA is an equal opportunity employer and is committed to maintaining a professional working environment that is free from discrimination and unlawful harassment. The Management, contractors, and staff of VIVA USA shall respect others without regard to race, sex, religion, age, color, creed, national or ethnic origin, physical, mental or sensory disability, marital status, sexual orientation, or status as a Vietnam-era, recently separated veteran, Active war time or campaign badge veteran, Armed forces service medal veteran, or disabled veteran. Please contact us at for any complaints, comments and suggestions.

Contact Details :

Account co-ordinator: Ramadas Kumaresan

VIVA USA INC.

3601 Algonquin Road, Suite 425

Rolling Meadows, IL 60008

|