Cloud Security Engineer - OCI (Oracle Cloud Infrastructure)

NEPSE Trading; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Workstreet is seeking a Cloud Security Engineer to design, implement, and maintain security controls across multiple cloud environments (AWS, GCP, Azure, OCI). You will work directly with clients to strengthen security posture and automate operations, delivering end-to-end security solutions.

The role requires hands-on cloud security expertise, strong IaC skills with Terraform and CloudFormation, and governance alignment to SOC 2, ISO 27001, GDPR, and HIPAA.

Qualifications

• Hands-on validation across AWS, GCP, Azure, and OCI.
• Active technical certifications such as AWS Security, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.

Responsibilities

• Deploy and maintain cloud security controls across AWS, GCP, Azure, and OCI.
• Conduct architectural risk assessments to surface vulnerabilities and plan remediation.
• Configure and manage security tool suites including SIEM, log analytics, IAM, IDS/IPS, and vulnerability engines.
• Own client relationships and manage project milestones and escalations.
• Engineer automated IaC deployment playbooks and testing infrastructure.
• Embed security guardrails into CI/CD pipelines and containers.
• Investigate and contain cloud security incidents and perform forensic steps.
• Assist with audit readiness in GRC platforms like Vanta.

Skills

Multi-cloud security

Security architecture

Automation with IaC

GRC alignment

Problem solving

Client consulting

Technical communication

Tools

Terraform

AWS CloudFormation

Python

Bash

Job description

About Workstreet

At Workstreet , we're on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs.

As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Get to Know the Security Services Team

We are the team that turns complex security requirements and compliance frameworks into infrastructure and services that actually work. Moving fast and taking true end-to-end ownership, our team spans three core functions: Cloud Security Engineering , where we design hardened AWS, Azure, and GCP environments, write Terraform baselines, and fix failing controls to meet frameworks like SOC 2, ISO 27001, CMMC, and FedRAMP; Penetration Testing , where we run disciplined offensive assessments across networks, apps, cloud, and AI/LLM systems to catch vulnerabilities before adversaries do; and Vulnerability Management , where we continuously prioritize, patch, and validate risk reduction across the client footprint.

We do not hide behind process or just point out gaps. We step in, build solutions, and deliver real security posture improvements with minimal disruption.

What makes this team special isn't just our technical depth; it is how we back each other up. Our strongest engineers and assessors are the ones building reusable modules, writing custom tools, jumping into channels to unblock teammates, and mentoring without being asked.

From early-stage startups to regulated enterprises, you will work directly with clients, take on real ownership early, and be surrounded by people who want to see you get good.

If you enjoy solving tough security problems and want to be part of a team that is scrappy enough to move fast but seasoned enough to get it right, you will be in good company here.

The Opportunity

We are seeking a Cloud Security Engineer with Oracle Cloud Infrastructure (OCI) , including compute, networking, storage, and IAM experience, to help clients design, implement, and maintain security controls that meet compliance and security requirements.

This role is ideal for professionals with hands-on experience in cloud security engineering, compliance frameworks, and cloud-based security best practices. You'll work closely with clients and internal teams to strengthen their cloud security posture and automate security operations across AWS, GCP, and Azure environments.

What You'll Do

• Deploy and maintain robust cloud security controls across AWS, GCP, Azure, and OCI to eliminate misconfigurations and preserve strict regulatory compliance alignment.
• Execute deep-dive architectural risk assessments to surface cloud system vulnerabilities, evaluate asset exposures, and engineer targeted technical remediation blueprints.
• Configure and manage enterprise security tool suites , including SIEM solutions, log analytics platforms, identity management layers, IDS/IPS tools, and vulnerability management engines.
• Own the client relationship lifecycle as the primary trusted advisor for an assigned portfolio, establishing project milestones, managing communication pathways, and handling technical escalations with calm professionalism.
• Programmatically enforce security controls by engineering automated, repeatable IaC deployment playbooks and security testing infrastructure.
• Embed continuous security guardrails into CI/CD pipelines and containerized environments to intercept system vulnerabilities early in the software development lifecycle.
• Investigate and contain cloud-related security incidents , rapidly executing forensic logic and remediation steps to restore system integrity and minimize blast radii.
• Support continuous audit readiness within GRC platforms like Vanta by systematically gathering, testing, and validating cloud configuration evidence.

Who You Are

• Proven multi-cloud security engineer - Command direct operational ownership of distributed cloud infrastructure security, with hands-on validation across AWS, GCP, Azure, and Oracle Cloud Infrastructure (OCI).
• Cloud security architecture expert - Mastered advanced identity and access management (IAM) strategies, cloud network zoning, payload encryption standards, and systemic risk mitigation workflows.
• Advanced security automation developer - Highly proficient in in Infrastructure as Code (IaC), building and deploying automated guardrails with Terraform, AWS CloudFormation, Python, and Bash.
• GRC infrastructure strategist - Aligned technical, cloud-native configurations directly against global regulatory compliance and audit frameworks, including SOC 2, ISO 27001, GDPR, and HIPAA.
• Surgical technical problem-solver - Apply rigorous analytical diagnostics to isolate cloud infrastructure vulnerabilities, resolve failing controls, and execute zero-disruption remediation.
• High-impact client consultant - Confidently orchestrate multiple client portfolios concurrently, partnering directly with US-based technology founders, DevOps leads, and executive teams to scale cloud security maturity.
• Elite technical communicator - Deliver flawless written and verbal English communication that effortlessly translates dense cloud vulnerabilities and risk vectors into actionable business value.

What will help you succeed

• Deep data and monitoring tooling execution - Advanced manipulation of enterprise logging platforms, vulnerability management engines, threat hunting feeds, and network traffic analysers.
• Validated cloud security credentials - Hold active technical certifications such as AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.
• Container and DevSecOps engineering - Practical success auditing and isolating security boundaries within microservice architectures, Docker instances, and Kubernetes