Manager, Cloud Security Engineering

Jobgether; United States; Remote; USD 180,000 - 250,000; Full time

Benefits offered by this job

Remote-first culture

Competitive compensation

Career development

Training support

Structured performance reviews

Job summary

Jobgether is seeking a senior cloud security leader to mentor a multi-cloud security engineering team. You will drive architecture across AWS, Azure, and GCP, implement secure IAM and encryption, and embed security into CI/CD pipelines while coordinating with GRC and executives.

We value hands-on credentials and strong leadership for rapid growth in a remote-first, international team.

Qualifications

• Experience leading cloud security engineering teams and hiring.
• Deep hands-on security for multi-cloud (AWS, Azure, GCP).
• Knowledge of IAM, RBAC/ABAC, encryption, logging and monitoring.
• Proficiency with Terraform and infrastructure-as-code reviews.
• Familiarity with CloudFormation and scripting languages (Python/Bash).
• Experience mapping regulatory controls to technical security controls (SOC 2, HIPAA, GDPR).

Responsibilities

• Lead, mentor, and develop a multi-cloud security engineering team.
• Oversee delivery across client engagements including milestones and timelines.
• Set engineering standards, IaC modules, and secure landing zones.
• Guide architecture decisions across AWS, Azure, and GCP for secure configs.
• Implement security tooling (GuardDuty, Defender, SIEM) and guardrails in pipelines.
• Collaborate with GRC to align security with audits and contracts.
• Drive automation and operational efficiency in delivery and remediation.

Skills

Cloud security leadership

Team leadership

Performance management

Recruitment planning

Client engagement

Education

AWS Certified Security – Specialty

Azure Security Engineer Associate

GCP Professional Cloud Security Engineer

CISSP

CISM

CISA

Tools

Terraform

CloudFormation

Python

Bash

Job description

Accountabilities:

- Lead, mentor, and develop a team of Cloud Security Engineers through regular coaching, performance reviews, career development plans, and clear technical expectations.

- Manage recruitment, selection, onboarding, and workforce planning to build a high-performing engineering team.

- Oversee delivery across multiple client engagements, including resource allocation, capacity planning, project milestones, technical quality, and delivery timelines.

- Act as the primary escalation point for technical challenges and client relationship matters, leading discussions with engineering leaders and executives.

- Establish and maintain engineering standards, reusable Terraform and CloudFormation modules, secure cloud landing zones, IAM configurations, and infrastructure-as-code practices.

- Guide cloud architecture decisions across AWS, Azure, and GCP, ensuring secure configurations covering identity management, network segmentation, encryption, monitoring, and logging.

- Oversee the implementation and optimization of native cloud security solutions, including AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud.

- Integrate security into development and deployment pipelines by implementing automated guardrails, remediation workflows, vulnerability scanning, and secret detection.

- Ensure technical cloud controls effectively address regulatory and security frameworks, including SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.

- Lead cloud security incident response processes, ensuring rapid containment, investigation, remediation, and continuous improvement.

- Collaborate with Governance, Risk, and Compliance (GRC) teams to align technical implementations with audit requirements, client objectives, project scopes, and new business opportunities.

- Monitor engineering delivery performance, remediation timelines, and infrastructure module reuse while identifying opportunities to improve automation and operational efficiency.

- Remain hands-on when needed by participating in architecture reviews, complex remediation projects, and client technical workshops.

Requirements:

- Significant experience managing, mentoring, and developing cloud security engineering teams, including recruitment, performance management, and team capacity planning.

- Deep hands-on expertise securing multi-cloud environments across AWS, Microsoft Azure, and Google Cloud Platform (GCP).

- Strong knowledge of cloud security architecture, including IAM strategies, RBAC, ABAC, federated identity, least-privilege access, network segmentation, encryption, and centralized logging.

- Advanced proficiency in Terraform and practical experience reviewing infrastructure-as-code modules, versioning, state management, and security configurations.

- Working knowledge of CloudFormation and scripting languages such as Python or Bash.

- Demonstrated experience translating regulatory and compliance frameworks into effective technical security controls, particularly SOC 2, ISO 27001, GDPR, and HIPAA.

- Experience implementing and managing cloud-native security tools, SIEM platforms, vulnerability management solutions, and threat detection capabilities.

- Strong understanding of DevSecOps practices, including SAST, DAST, secret scanning, automated remediation, and security integration into GitHub Actions or Azure DevOps.

- Proven ability to manage multiple client engagements simultaneously in a fast-paced consulting, MSSP, or high-growth technology environment.

- Experience advising clients, leading architectural workshops, managing escalations, and communicating technical risks to both engineering teams and executive stakeholders.

- Excellent written and verbal English communication skills, with strong problem-solving, decision-making, organizational, and interpersonal abilities.

- Ability to work remotely with a reliable high-speed internet connection and a professional home office environment.

- Availability to work a standard schedule of 8:00 AM to 5:00 PM U.S. Eastern Time and willingness to travel locally for occasional onsite meetings or team activities.

- Must be authorized to work in the United States without requiring current or future employment-based visa sponsorship.

Additional qualifications that would be advantageous:

- Relevant industry certifications, such as AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.

- Experience building or scaling security engineering teams in consulting, managed security services, or rapidly growing technology organizations.

- Hands-on experience with federal and regulated environments, particularly CMMC-compliant infrastructure, FedRAMP architectures, and NIST 800-53 or NIST 800-171 implementations.

- Practical experience implementing FIPS 140 encryption requirements across cloud services.

- Knowledge of container security, microservices, Docker, Kubernetes, runtime protection, and vulnerability scanning.

- Experience deploying Zero Trust architectures, identity-centric security policies, network micro-segmentation, and context-aware access controls.

- Advanced familiarity with SIEM platforms, security monitoring, vulnerability management, and threat-hunting technologies.

Benefits:

- Competitive compensation: Attractive base salary with regular performance reviews and merit-based salary progression.

- Performance incentives: Potential bonus opportunities linked to individual performance and contributions.

- Remote-first culture: Flexibility to work remotely while collaborating with an international team.

- Career development: Clear opportunities for professional growth, mentorship, and career advancement.

- Training support: Reimbursement for approved role-related training programs and successfully completed certification courses.

- Professional growth: Opportunity to build and shape a growing cloud security engineering practice within an early-stage company.

- Leadership opportunities: Direct responsibility for team development, technical strategy, and client delivery.

- Collaborative environment: Work alongside experienced security professionals on challenging projects across multiple industries.

Additional Employment Information

- Recruitment involves live video interviews with cameras enabled throughout the process.

- Candidates must be prepared to complete identity verification during recruitment and onboarding.

- Employment is conditional upon successful identity verification and background screening, where legally permitted.

- The selection process includes structured interviews with hiring managers and cross-functional stakeholders.

- Candidates can expect regular communication and updates throughout the recruitment process.

- Employment-based visa sponsorship or visa transfers are not available for this position.