Remote Cloud Security Engineering Lead

Merck; Honolulu (HI); Remote; USD 142,000 - 224,000; Full time

Job summary

Merck is seeking a Cloud Security Engineer to design, implement, and automate security controls across enterprise cloud environments. The role partners with Cloud, Application, DevOps, and Security teams to ensure secure cloud deployments.

The candidate will design controls across AWS/Azure/GCP, secure identities and data, and build IaC-driven guardrails while integrating security into CI/CD pipelines and incident response. Remote options may apply.

Qualifications

• Bachelor's degree required.
• Minimum 8 years of AWS/Azure/GCP security experience.
• Hands-on IAM, cloud networking, encryption, secrets management, workloads security.
• Experience with Infrastructure as Code technologies.
• Experience with Git, CI/CD, Python, PowerShell, Bash, or similar automation.
• Understanding of Kubernetes and container security.
• Familiarity with Wiz, AWS Security Hub, etc.
• Strong troubleshooting, analytical, and communication skills.

Responsibilities

• Design and implement security controls across AWS, Azure, and/or GCP.
• Secure cloud identity, networking, workloads, data, containers, and APIs.
• Build guardrails using IaC and policy-as-code.
• Integrate security into CI/CD pipelines and deployment processes.
• Identify and remediate cloud misconfigurations and vulnerabilities.
• Support cloud security monitoring, logging, threat detection, and incident response.
• Partner with engineering teams for security guidance and reviews.

Skills

IAM & cloud security

Cloud networking

Workload security

Encryption & secrets

IaC automation

CI/CD integration

Kubernetes security

Troubleshooting & comms

Education

Bachelor's degree

Tools

IaC tools

Git

CI/CD tooling

Python/PowerShell/Bash

Job description

Merck is seeking a Cloud Security Engineer to design, implement, and automate security controls across enterprise cloud environments. The role partners with Cloud, Application, DevOps, and Security teams to ensure secure cloud deployments.

The candidate will design controls across AWS/Azure/GCP, secure identities and data, and build IaC-driven guardrails while integrating security into CI/CD pipelines and incident response. Remote options may apply.