Remote Senior Cloud Security Engineer | DevOps Security

Tessera Labs; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Tessera Labs is hiring a Senior Cloud Security Engineer to harden and automate cloud security across AWS, GCP, and Azure. You will implement guardrails, secure CI/CD, and drive secure-by-default infrastructure with a DevOps mindset.

You design reference architectures, enforce least-privilege IAM, embed security into IaC, and collaborate with platform, infrastructure, and compliance teams to improve our security posture and compliance readiness.

Qualifications

• DevOps/SRE/platform engineering background with production infra and CI/CD pipelines experience.
• Hands-on experience securing two major cloud providers (AWS, GCP, or Azure) and understanding their identity, networking, and logging models.
• Deep knowledge of CIS Benchmarks and cloud security foundations, applied pragmatically.
• Fluency in least-privilege IAM, workload identity, network segmentation, encryption and secrets management, and centralized logging.
• Strong coding/scripting in Python or Go plus shell scripting; able to write maintainable automation.
• Hands-on IaC experience (Terraform/OpenTofu) with embedded security checks.
• Strong communication to explain risk to engineers and stakeholders.

Responsibilities

• Own the security posture of cloud environments across AWS, GCP, and Azure with consistent controls.
• Design secure reference architectures and reusable patterns for account/project structure, network segmentation, encryption, and secrets management.
• Embed security into IaC through hardened modules, policy-as-code, and pre-deploy checks.
• Secure CI/CD pipelines and software supply chain, including pipeline permissions and secret handling.
• Design and enforce least-privilege IAM across clouds, with federation and access reviews.
• Automate security controls and evidence collection; reduce manual work through automation.
• Operate CSPM and cloud-native security services, driving findings to remediation with owning teams.
• Build logging/detection for cloud control-plane/workloads and lead cloud incident response.
• Contribute security controls/evidence to SOC 2, ISO 27001, and similar compliance programs.

Skills

DevOps foundation

Cloud security

Least-privilege IAM

Coding/scripting

Shell scripting

IaC tooling

Communication

Tools

Terraform

OpenTofu

Prowler

Checkov

Trivy

OPA

Falco

Job description

Tessera Labs is hiring a Senior Cloud Security Engineer to harden and automate cloud security across AWS, GCP, and Azure. You will implement guardrails, secure CI/CD, and drive secure-by-default infrastructure with a DevOps mindset.

You design reference architectures, enforce least-privilege IAM, embed security into IaC, and collaborate with platform, infrastructure, and compliance teams to improve our security posture and compliance readiness.