Senior Cloud Security Engineer

SATCON Inc; Alpharetta (GA); On-site; USD 150,000 - 210,000; Full time

Job summary

SATCON Inc. seeks an experienced cloud security engineer with hands-on IaC and policy-as-code expertise. The role focuses on building secure deployment pipelines, implementing policy controls, and securing multi-cloud architectures.

Responsibilities include designing scalable policy libraries, mentoring peers, and integrating security into CI/CD with gating and enforcement.Candidates should have 9+ years of cloud security engineering experience and strong Terraform proficiency.

Qualifications

• Bachelor’s degree or equivalent experience in CS or InfoSec.
• 9+ years of hands-on cloud security engineering experience.
• Experience designing policy-as-code controls using OPA/Rego and Regula.
• Deep Terraform expertise including modules, state management, and secure patterns.
• Experience integrating security controls into CI/CD pipelines with gating and enforcement.
• Ability to translate security requirements into automated deploy-time controls.
• Strong understanding of cloud security architectures across AWS, Azure, GCP (IAM, networking, data protection).
• Experience implementing control validation, testing strategies, and drift detection.
• Familiarity with CSPM platforms and aligning deploy-time with runtime compliance.
• Strong threat modeling knowledge and mitigation of misconfiguration risks.
• Experience building reusable policy libraries and enterprise-scale control frameworks.
• Experience mentoring peers in policy-as-code and secure pipeline practices.

Skills

Cloud security engineering

Infrastructure as code

Deployment pipelines

Policy-as-code

CI/CD integrity

Automated deploy-time controls

Cloud security architectures

IAM and networking

Threat modeling

Policy libraries

Mentoring peers

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Terraform

OPA/Rego

Regula

CSPM platforms

Job description

What You Ll Bring To The Role

• Bachelor s degree in Computer Science, Information Security, or a related field, or equivalent experience.
• Bachelor s degree in Computer Science, Information Security, or a related field, or equivalent experience.
• 9+ years of hands-on experience in cloud security engineering, with a strong focus on infrastructure-as-code and deployment pipelines.
• Proven experience designing and implementing policy-as-code controls using OPA/Rego and/or Regula in production environments.
• Deep hands-on expertise with Terraform, including module design, state management, and secure configuration patterns.
• Strong experience integrating security controls into CI/CD pipelines, including gating and enforcement mechanisms.
• Demonstrated ability to translate security requirements into automated, testable, and enforceable deploy-time controls.
• Solid understanding of cloud security architectures across AWS, Azure, and/or Google Cloud Platform, including IAM, networking, and data protection controls.
• Experience implementing control validation and testing strategies, including policy unit testing, pipeline validation, and drift detection.
• Familiarity with CSPM platforms and the ability to align deploy-time controls with runtime detection and compliance models.
• Strong understanding of modern threat models, attack paths, and misconfiguration risks in cloud environments, and how to mitigate them through preventive controls.
• Experience building and maintaining reusable policy libraries and shared control frameworks at enterprise scale.
• Experience working as a senior engineer on complex technical initiatives, including task prioritization, delivery planning, and contribution to technical direction.
• Demonstrated ability to mentor peers and share expertise, particularly in policy-as-code, Terraform, and secure pipeline practices.