Remote Senior Cloud Security Engineer: Guardrails & DevOps

Tessera Labs; Oregon; Hybrid; USD 140,000 - 200,000; Full time

Job summary

Tessera Labs is seeking a Senior Cloud Security Engineer to secure multi-cloud environments and embed security into automated pipelines. You will design guardrails, patterns, and policy-as-code that keep infrastructure secure by default across AWS, GCP, and Azure.

You will work with DevOps and compliance teams to drive CSPM, logging, and incident response, while aligning with SOC 2/ISO 27001 controls and scalable security practices.

Qualifications

• DevOps foundation with production infra and CI/CD experience.
• Hands-on production experience securing at least two cloud providers (AWS, GCP, or Azure).
• Knowledge of CIS Benchmarks and provider security foundations guidance.
• Least-privilege IAM, workload identity, network segmentation, encryption, and secrets management.
• Strong coding/scripting in Python or Go and shell scripting.
• IaC experience with Terraform or OpenTofu and embedding security checks.
• Strong communication skills to explain risk to engineers.

Responsibilities

• Own security posture across AWS, GCP, and Azure with consistent controls.
• Design secure reference architectures and reusable patterns for accounts, networks, and encryption.
• Embed security into IaC with hardened modules and policy as code.
• Secure CI/CD pipelines and the software supply chain; manage secrets and identity.
• Enforce least-privilege IAM across clouds; federation and reviews.
• Automate security controls, remediation, and evidence collection.
• Operate CSPM and cloud-native security services; drive remediation with owning teams.
• Build logging and detection; lead cloud incident response.
• Contribute security controls to SOC 2, ISO 27001, and related programs.

Skills

DevOps

SRE

Platform engineering

CI/CD pipelines

Cloud security

Python/Go

Shell scripting

IaC (Terraform/OpenTofu)

Communication

Tools

Terraform

OpenTofu

Prowler

Checkov

Trivy

OPA

Falco

Kubernetes

GitHub Actions

Job description

Tessera Labs is seeking a Senior Cloud Security Engineer to secure multi-cloud environments and embed security into automated pipelines. You will design guardrails, patterns, and policy-as-code that keep infrastructure secure by default across AWS, GCP, and Azure.

You will work with DevOps and compliance teams to drive CSPM, logging, and incident response, while aligning with SOC 2/ISO 27001 controls and scalable security practices.