Remote Cloud Security Engineer: CSPM & IAM

Bayview Asset Management, LLC; Coral Gables (FL); Teletrabalho; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

Bayview Asset Management seeks a Cloud Security Engineer to design, implement, and operate security controls across the organization’s cloud environments. You will collaborate with cloud platform, DevOps, architecture, and risk teams to safeguard workloads while enabling secure business delivery.

Essential duties include building guardrails with policy as code and IaC, maintaining CSPM tools, and publishing cloud security standards aligned with regulations.

Qualificações

• BA/BS in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or related field, or equivalent experience
• 5 years of experience in information security, cloud engineering, systems engineering, or related technology roles, including hands-on experience securing AWS and/or Azure environments
• Experience administering CSPM, CNAPP, or cloud workload protection capabilities and driving findings through remediation
• Experience implementing cloud guardrails, policy as code, and infrastructure as code in enterprise cloud environments
• Experience creating and applying cloud security standards, configuration baselines, and secure design patterns
• Experience with cloud security monitoring, vulnerability management, incident response, and remediation workflows
• Experience in highly regulated environments, preferably Financial Services or similar

Responsabilidades

• Design, implement, and maintain security controls and reference architectures for cloud environments across IaaS, PaaS, container, serverless, and managed-service workloads
• Manage and optimize Cloud Security Posture Management (CSPM) and related cloud-native security tools, including onboarding accounts and subscriptions, tuning policies, validating findings, reporting risk, and coordinating remediation
• Build, deploy, and maintain preventive and detective cloud guardrails through policy as code, infrastructure as code, automated compliance checks, and cloud-native policy services
• Develop, publish, and maintain cloud security standards, baselines, patterns, and procedures aligned with business requirements, regulatory obligations, and recognized security frameworks
• Partner with cloud platform, DevOps, application, and architecture teams to embed security requirements into landing zones, CI/CD pipelines, templates, and solution designs
• Review cloud architectures and configurations for identity and access management, network segmentation, private connectivity, encryption, key management, secrets management, logging, and data protection
• Implement and maintain least-privilege access models, privileged access controls, service identities, and workload identity protections across AWS and Azure
• Monitor and investigate cloud security findings, misconfigurations, vulnerabilities, anomalous activity, and policy violations, and coordinate risk-based remediation with accountable teams
• Create and maintain cloud security documentation, diagrams, runbooks, metrics, and risk reports for technical and leadership audience
• Participate in the Security Engineering team on-call rotation

Conhecimentos

AWS & Azure security

Cloud security monitoring

CSPM/CNAPP

IaC (Terraform/CloudFormation)

Scripting (Python/Bash/PowerShell)

Security frameworks (NIST/CIS/CSA)

On-call / incident response

Formação académica

BA/BS in Computer Science or related field

Ferramentas

Terraform

CloudFormation

CNAPP tooling

CSPM tooling

Descrição da oferta de emprego

Bayview Asset Management seeks a Cloud Security Engineer to design, implement, and operate security controls across the organization’s cloud environments. You will collaborate with cloud platform, DevOps, architecture, and risk teams to safeguard workloads while enabling secure business delivery.

Essential duties include building guardrails with policy as code and IaC, maintaining CSPM tools, and publishing cloud security standards aligned with regulations.