Senior Cloud Security Controls Engineer (Policy-as-Code)

Software Guidance & Assistance, Inc. (SGA, Inc.); Alpharetta (GA); On-site; USD 150,000 - 210,000; Full time

Job summary

Software Guidance & Assistance, Inc. (SGA) is seeking a Senior Cloud Controls Engineer for a CONTRACT assignment in Alpharetta, GA.

You will design deploy-time security controls across AWS, Azure, and GCP, leveraging OPA/Rego and Regula, and integrate policy-as-code into Terraform workflows and CI/CD pipelines. You will contribute to policy lifecycle, develop reusable policy libraries, and provide expert guidance on Terraform, IaC, and secure pipeline practices.

Qualifications

• Bachelor's degree or equivalent in computer science, information security, or related field.
• 7+ years hands-on cloud security engineering experience.
• Proven experience designing policy-as-code controls with OPA/Rego and Regula.
• Deep Terraform expertise including modules, state, and secure patterns.
• Experience integrating security controls into CI/CD pipelines and gating/enforcement.

Responsibilities

• Design and implement deploy-time security controls for cloud services across AWS, Azure, and GCP using OPA/Rego and Regula.
• Translate firm-wide configuration baseline requirements into policy-as-code integrated into Terraform workflows and CI/CD pipelines.
• Contribute across the control lifecycle: requirements interpretation, policy authoring, testing, optimization, and deployment.
• Establish reusable policy libraries and modules for consistency and scalability across environments.
• Provide hands-on guidance in OPA/Rego, Regula, Terraform, and secure pipeline design.

Skills

Cloud security

OPA Rego

Regula

Terraform

CI/CD security

Policy-as-code

Multi-cloud

Mentoring

Education

Bachelor's degree in CS or InfoSec

Job description

Software Guidance & Assistance, Inc. (SGA) is seeking a Senior Cloud Controls Engineer for a CONTRACT assignment in Alpharetta, GA.

You will design deploy-time security controls across AWS, Azure, and GCP, leveraging OPA/Rego and Regula, and integrate policy-as-code into Terraform workflows and CI/CD pipelines. You will contribute to policy lifecycle, develop reusable policy libraries, and provide expert guidance on Terraform, IaC, and secure pipeline practices.