Senior Cloud Controls Engineer — Hybrid (GA, 12 mo)

Russell, Tobin & Associates; Johns Creek (GA); Hybrid; USD 90,000 - 96,000; Full time

Job summary

Russell, Tobin & Associates is seeking a Senior Cloud Controls Engineer to design and implement deploy-time security controls across major cloud platforms. You will work with OPA/Rego, Regula, and Terraform to enforce policy-as-code within CI/CD pipelines.

The role requires deep cloud security expertise, experience with infrastructure-as-code, and the ability to translate security requirements into automated controls. Hybrid work arrangement in the Alpharetta/Johns Creek area supported.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field or equivalent experience.
• 7+ years hands-on cloud security engineering experience.
• Proven design/implementation of policy-as-code controls (OPA/Rego and/or Regula).
• Deep Terraform expertise including modules, state management, and secure configuration patterns.
• Experience integrating security controls into CI/CD pipelines with gating and enforcement.

Responsibilities

• Design and implement deploy-time security controls for cloud services across Azure, AWS, and Google Cloud Platform.
• Translate baseline requirements into enforceable policy-as-code integrated into Terraform workflows and CI/CD pipelines.
• Contribute across the control implementation lifecycle: interpretation, policy authoring, testing, optimization, deployment.

Skills

Cloud security engineering

Infrastructure-as-code

Terraform

Policy-as-code

OPA/Rego

Regula

CI/CD pipelines

Education

Bachelor's degree in Computer Science or Information Security

Tools

Terraform

OPA/Rego

Regula

Job description

Russell, Tobin & Associates is seeking a Senior Cloud Controls Engineer to design and implement deploy-time security controls across major cloud platforms. You will work with OPA/Rego, Regula, and Terraform to enforce policy-as-code within CI/CD pipelines.

The role requires deep cloud security expertise, experience with infrastructure-as-code, and the ability to translate security requirements into automated controls. Hybrid work arrangement in the Alpharetta/Johns Creek area supported.