Infrastructure Security Engineer - Cloud & SASE (Remote)

Applied Systems; United States; On-site; USD 80,000 - 120,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

Holiday and vacation time

Health & Wellness days

Birthday bonus

Job summary

Applied Systems is seeking an experienced Infrastructure Security Engineer to design and operate cloud security controls across AWS, GCP, and Azure, including Cloudflare WAF and SASE implementations. You will own security initiatives, mentor engineers, and collaborate with incident response teams in a remote-first North American setup.

This role emphasizes IaC security, CSPM, and network security evolution beyond perimeter defenses, with opportunities for growth and cross-cloud expertise.

Qualifications

• 3+ years in cloud security engineering, DevSecOps, or site reliability engineering.
• Advanced knowledge of two or more cloud platforms (AWS, GCP, Azure).
• Hands-on WAF experience, Cloudflare preferred.
• Experience with SASE/zero-trust network access.
• Knowledge of PAM (BeyondTrust or equivalent) and secrets management.

Responsibilities

• Design, implement, and maintain cloud security solutions across AWS, GCP, and Azure.
• Lead Cloudflare WAF and edge security controls deployment in production.
• Develop and maintain zero-trust access controls and CSPM processes.
• Create and manage IaC security configurations (Terraform/Ansible/Pulumi).
• Participate in security reviews, threat modeling, and incident response runbooks.

Skills

Cloud security engineering

DevSecOps

Site Reliability Engineering

Zero trust

SASE concepts

Scripting (PowerShell/Python/Bash/Go)

Tools

Cloudflare WAF

Terraform

Ansible

Pulumi

Keeper

BeyondTrust PAM

CloudWatch/Stackdriver/Azure Monitor

Job description

Applied Systems is seeking an experienced Infrastructure Security Engineer to design and operate cloud security controls across AWS, GCP, and Azure, including Cloudflare WAF and SASE implementations. You will own security initiatives, mentor engineers, and collaborate with incident response teams in a remote-first North American setup.

This role emphasizes IaC security, CSPM, and network security evolution beyond perimeter defenses, with opportunities for growth and cross-cloud expertise.