Cloud Security Engineer III

Sheetz Inc.; Pittsburgh (Allegheny County); On-site; USD 95,351 - 158,922; Full time

Benefits offered by this job

Quarterly employee bonuses

Competitive salaries

PTO and parental leave

401k match

Employee stock ownership

Tuition reimbursement

Full medical, vision, and dental coverage

Snack discounts

Job summary

A cloud-driven company is seeking a Cloud Security Engineer III to design and implement scalable cloud security solutions across AWS, Azure, and GCP. The ideal candidate will manage identity and access, lead incident response, and collaborate with internal teams to enhance security systems. This role requires a Bachelor’s degree and at least 5 years of experience in cloud cybersecurity. Competitive salary and various employee perks are offered, ensuring a supportive work environment focused on security innovation.

Qualifications

• Minimum 5 years of hands-on experience in cloud cybersecurity roles, with at least 3 years in Cloud Security Engineering.
• Experience with cloud provider native security solutions in AWS, GCP, or Azure.
• Knowledge of IP, TCP/IP, and other network administration protocols preferred.

Responsibilities

• Design and architect scalable cloud security solutions.
• Serve as the subject matter expert for cloud security across AWS, Azure, and GCP.
• Lead cloud-based security incident response efforts.

Skills

Cloud cybersecurity

Identity and access management

Network security

Data protection

Threat detection

Education

Bachelor’s degree in Computer Science, Engineering or related field

Tools

AWS

Azure

GCP

Job description

This role is focused on helping teams build and operate in the cloud safely, consistently, and at scale. As a Cloud Security Engineer III, you’ll design secure cloud foundations, strengthen identity and access controls, and implement guardrails that allow engineering teams to move fast without introducing unnecessary risk. You’ll partner closely with cloud, infrastructure, and application teams to ensure security is built in, not bolted on.

Why It’s Exciting

You’ll work hands‑on with modern, cloud-native technologies across AWS, Azure, and GCP

Your work will directly influence how the entire organization designs and secures cloud environments

Automation is core to the role, you’ll reduce manual effort by building repeatable, scalable security controls

What’s Challenging

The cloud evolves rapidly, with new services, features, and risks emerging constantly

Identity and access decisions are critical, small misconfigurations can have large impacts

Success requires systems-level thinking, securing platforms and patterns rather than individual accounts or applications

Why It Matters

Sheetz’s future is increasingly cloud-driven. The decisions you make in this role will help define the company’s cloud security posture for years to come, enabling innovation while protecting the business, our customers, and our brand.

This position offers a base salary range of $95,351.00 - $158,922.00 per year, depending on experience and qualifications, plus bonus based on company performance.

One of the MANY work perkz at Sheetz is quarterly employee bonuses based on company performance! And there’s more – A LOT more… like competitive salaries, PTO and parental leave, 401k match and employee stock ownership, limitless professional development and growth opportunities, tuition reimbursement, full medical, vision and dental coverage, and snack discounts!

OVERVIEW

Responsible for designing, implementing, and governing comprehensive cloud security controls across multi-cloud environments (AWS, Azure, and GCP). Ensures the confidentiality, integrity, and availability of cloud-based systems by embedding security into architecture, deployment, and operations, while proactively identifying risk, responding to threats, and enabling secure innovation at scale.

RESPONSIBILITIES (other duties may be assigned)

1. Design and architect scalable, resilient cloud security solutions that align with organizational risk tolerance, regulatory requirements, and industry best practices.
2. Serve as the subject matter expert (SME) for cloud security across AWS, Azure, and GCP, providing guidance on identity and access management, network security, data protection, logging, and monitoring.
3. Lead cloud-based security incident response efforts, including detection, investigation, containment, remediation, and post‑incident analysis.
4. Integrate security controls into CI/CD pipelines by implementing secure build, test, and deployment practices, including automated security testing and policy enforcement.
5. Review Infrastructure-as-Code (IaC) templates and configurations to ensure secure design patterns, compliance with standards, and prevention of misconfigurations.
6. Evaluate, recommend, and deploy cloud security tools and services (e.g., CSPM, CWPP, CIEM, SIEM integrations) to enhance visibility, threat detection, and risk management.
7. Collaborate closely with platform engineering, DevOps, architecture, and compliance teams to embed security into cloud solutions without impeding delivery velocity.
8. Conduct cloud risk assessments and threat modeling for new and existing services, identifying vulnerabilities and recommending mitigation strategies.
9. Drive remediation of complex cloud security issues by prioritizing risk, coordinating cross‑functional efforts, and validating corrective actions.
10. Develop, document, and maintain cloud security standards, policies, reference architectures, and best practices to ensure consistent and secure cloud adoption.
11. Maintain up‑to‑date, in‑depth knowledge of the cloud security landscape, including emerging threats, attack techniques, regulatory changes, and evolving security technologies.
12. Participate in an on‑call rotation to provide evening and weekend support as needed. As Sheetz operates 24/7/365, internal and external customers may require support at any time.

QUALIFICATIONS

(Equivalent combinations of education, licenses, certifications and/or experience may be considered. Two years of experience is equivalent to one year of college/trade school)

Education

• Bachelor’s degree in Computer Science, Engineering or related field required.

Experience

• Minimum 5 years of hands‑on experience in cloud cybersecurity roles, with at least 3 years in Cloud Security Engineering required
• Previous exposure utilizing cloud provider native security solutions in at least one of AWS, GCP, or Azure required
• Previous exposure to IP, TCP/IP, and other network administration protocols preferred
• Previous exposure to Windows and Linux systems preferred

Licenses/Certifications

• Maintain a continuous personal professional development program; this level requires CISSP certification and commitment to pursue additional training or certifications in risk, security, governance, compliance (e.g., CISSP‑ISSEP, CISSP‑ISSAP, CISSP‑ISSMP, GICSP, GMOB, GCIH, CRCMP, CISA, CGEIT, CRISC, CRMA, CORP, advanced degree)

Tools & Equipment

ACCOMMODATIONS

Sheetz is committed to the full inclusion of all qualified individuals. Sheetz is committed to considering all applicants regardless of disability who can perform all essential job duties with or without accommodations.