Freelance Cloud and Infrastructure Security Engineer

WISE INTEGRATION; United States; Remote; USD 140,000 - 210,000; Full time

Benefits offered by this job

Remote work support

Job summary

Wise Integration seeks an experienced Cloud and Infrastructure Security Engineer to map and strengthen a multi-cloud security posture for a US-based SaaS provider serving public-sector clients. You will join a growing security team, work on Azure and AWS, and help harden CI/CD gates and identity services.

The role requires 8+ years in cloud/security, Azure expertise, Kubernetes security, and relevant certifications. Remote collaboration is common, with overlap to US Eastern time.

Qualifications

• 8+ years in cloud or infrastructure with a security focus.
• Deep Azure security expertise and working knowledge of AWS.
• Hands-on Kubernetes security experience.
• Certifications AZ-500 / AWS Security – Specialty / CCSP.
• Experience with CSPM tools like Defender for Cloud or Wiz.
• Experience securing legacy infra without IaC maturity.

Responsibilities

• Assess Azure environment (AKS with Istio, API Management, Front Door, Key Vault, etc.).
• Review AWS infra (ECS, EC2, Lambda, API Gateway, VPC).
• Evaluate edge security (Cloudflare, Front Door, App Gateway) incl. TLS and headers.
• Assess VM estate (500+ SQL Server DBs, legacy apps) without IaC.
• Review IaC/config mgmt (Terraform, OpenTofu, Ansible, Chef).
• Define hardening baselines and remediation priorities for cloud infra teams.

Skills

Azure security

AWS knowledge

Kubernetes security

Terraform/OpenTofu

AI-assisted review

Security risk assessment

Education

AZ-500

AWS Certified Security – Specialty

CCSP

Tools

Terraform

OpenTofu

Ansible

Chef

Defender for Cloud / Wiz

Job description

Описание: Our client is an IT company seeking an experienced Cloud and Infrastructure Security Engineer to assess and strengthen the security posture of a complex, multi-cloud infrastructure. The client is building a dedicated security team for a US-based SaaS provider whose platform serves hundreds of public-sector agencies across North America. The programme covers a large, varied estate of around a dozen product lines, running on Java, .NET, Node/TypeScript, Ruby and PHP across Azure and AWS, including legacy systems that need framework upgrades rather than quick patches. The work starts with a short phase where senior engineers do threat modelling and map the estate. A larger team then fixes vulnerabilities, hardens cloud infrastructure, builds security gates into CI/CD pipelines and consolidates identity services. Engineers work hands‑on with modern AI coding tools and learn security from experienced tower leads. It’s a strong fit for good software, cloud and DevOps engineers who want to grow into application security. The team works in English, with partial overlap with US Eastern time.

The Project

The project focuses on mapping the existing infrastructure attack surface, identifying security vulnerabilities and configuration gaps, and establishing a prioritized remediation roadmap. The engineer will work alongside other senior security specialists responsible for application security assessments, focusing specifically on cloud, edge, network, and virtual machine infrastructure.

Задачи

• Assess the Azure environment, including AKS with Istio, API Management, Application Gateway, Front Door, Azure Firewall, hub‑and‑spoke networking, and Key Vault.
• Review the AWS infrastructure supporting one product line, including ECS, EC2, Lambda, API Gateway, and VPC.
• Evaluate edge security across Cloudflare, Azure Front Door, and Application Gateway, covering WAF configurations, TLS, and security headers.
• Assess the VM estate, including 500+ SQL Server databases and legacy applications running on static VMs without infrastructure‑as‑code.
• Review infrastructure‑as‑code and configuration management practices using Terraform, OpenTofu, Ansible, and Chef.
• Define security hardening baselines and prioritize remediation activities for cloud and infrastructure engineering teams in the next project phase.

Требования

• Approximately 8+ years of experience in cloud or infrastructure engineering, with a strong background in security.
• Deep expertise in Azure security and practical working knowledge of AWS.
• Hands‑on experience with Kubernetes security.
• Proficiency in Terraform or OpenTofu.
• Practical experience using AI assistants to review infrastructure code and configurations.
• Ability to identify infrastructure security risks and translate findings into actionable remediation priorities.
• Experience securing Istio service mesh environments.
• Ability to review Ansible and Chef configurations.
• Relevant certifications such as AZ‑500, AWS Certified Security – Specialty, or CCSP.
• Experience with cloud security posture management tools such as Microsoft Defender for Cloud, Wiz, or similar.
• Previous experience securing and modernizing legacy infrastructure environments without established infrastructure‑as‑code practices.

Additional Info Location: Lithuania/Poland Start date: ASAP Contract duration: 12 months