Cloud Security Engineer: Multi-Cloud & Kubernetes Expert

Bright Mind Solutions LLC; Sunnyvale (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Bright Mind Solutions LLC in Sunnyvale, CA is seeking a Cloud Security Engineer for a contract role (6+ months). You will secure multi-cloud infrastructure across AWS, Azure, GCP, OCI with a strong focus on Kubernetes hardening and CSPM.

You will implement IAM controls, enforce least privilege, and oversee container security, IaC security, and compliance automation across environments. Local candidates only for onsite interviews.

Qualifications

• 5+ years in secure, production‑grade cloud systems
• Extensive Kubernetes security experience (RBAC, policies, secrets)
• Hands-on AWS security with multi-cloud exposure
• Experience with CSPM and IaC security tooling

Responsibilities

• Secure and maintain multi-cloud infrastructure (AWS, Azure, GCP, OCI) with guardrails.
• Kubernetes cluster hardening with RBAC, network policies, and admission controls.
• Develop and enforce IAM policies, least privilege across cloud and containers.
• Secure container images, registries, and runtimes with scanning tools.
• Manage IaC security using Terraform, CloudFormation, or AWS CDK.
• Operate CSPM tools (e.g., Wiz) for misconfigurations and drift remediation.
• Automate compliance checks and produce audit evidence for audits.
• Monitor and protect running apps and containers during operations.

Skills

Kubernetes security

RBAC enforcement

IAM & least privilege

CSPM tooling

IaC security

Cloud security architecture

Container security

Compliance automation

Tools

Terraform

CloudFormation

AWS CDK

Wiz

Kubernetes

Docker

Podman

Job description

Bright Mind Solutions LLC in Sunnyvale, CA is seeking a Cloud Security Engineer for a contract role (6+ months). You will secure multi-cloud infrastructure across AWS, Azure, GCP, OCI with a strong focus on Kubernetes hardening and CSPM.

You will implement IAM controls, enforce least privilege, and oversee container security, IaC security, and compliance automation across environments. Local candidates only for onsite interviews.