Senior Cloud Security Engineer

PowerPlan, Inc.; Atlanta (GA); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

PowerPlan, Inc. is seeking a Senior Cloud Security Engineer to build the company’s cloud security and IAM maturity programs across AWS and Azure. You’ll own compliance, identity strategy, and security automation as a senior individual contributor.

You’ll influence the roadmap and work with Cloud Engineering and executive stakeholders within 90 days to close gaps and drive least-privilege across the cloud using production-grade Terraform and automation.

Qualifications

• 8+ years of experience in cloud security with hands-on AWS and Azure.
• Strong IAM design and implementation knowledge (SAML, OIDC, RBAC, ABAC).
• Proficiency in Python and PowerShell for automation; Terraform experience.
• Experience implementing CIS, NIST, or SOC 2 at scale.
• Excellent written and verbal communication skills.

Responsibilities

• Assess and close security framework compliance gaps across AWS and Azure with a remediation roadmap by day 90.
• Build an IAM maturity roadmap from fragmented state to least-privilege enforcement.
• Translate security requirements into production-grade code—Terraform modules and automation.
• Serve as security SME in cloud architecture reviews and change advisory processes.
• Mentor teams on secure defaults and lead incident response end-to-end.

Skills

Cloud security

AWS

Azure

IAM design

Terraform

Python

PowerShell

Security automation

CI/CD security

Security frameworks

Education

Bachelor's degree

Tools

Terraform

CI/CD tooling

Job description

We're looking for a Senior Cloud Security Engineer to build PowerPlan's cloud security and IAM maturity programs from the ground up, rather than caretake an existing one. As a senior individual contributor, you'll own compliance, identity strategy, and security automation across both AWS and Azure.

Success here means shaping the roadmap leadership acts on, not just executing someone else's plan, with visible influence across Cloud Engineering, Information Security, and executive stakeholders within your first 90 days.

Success will be measured by how fast compliance gaps close, how real (not aspirational) least-privilege access becomes, and by whether the organization comes to you before it changes its cloud environment, not after.

• Assess and close security framework compliance gaps across AWS and Azure, with a prioritized remediation roadmap by day 90.
• Build an IAM maturity roadmap from the current fragmented state to least-privilege enforcement and centralized oversight.
• Turn security and IAM requirements into enforced, production‑grade code — Terraform modules and Python/PowerShell automation.
• Serve as the security subject matter expert in cloud architecture reviews and change advisory processes.
• Mentor Cloud Operations and Engineering teams on secure defaults so security shapes decisions before they ship.
• Lead incident response for cloud security events end-to-end, from detection through resolution.
• 8+ years of experience in cloud security, infrastructure security, or security engineering, with deep hands‑on experience across both AWS and Azure.
• Demonstrated experience implementing security frameworks such as CIS, NIST, or SOC 2 at scale.
• Strong IAM design and implementation background, including federation (SAML, OIDC), RBAC, ABAC, and privileged access management.
• Proficiency in Python and PowerShell for security automation, and hands‑on Terraform experience.
• A track record of translating security requirements into infrastructure‑as‑code guardrails integrated into CI/CD pipelines.
• Experience building or maturing a risk‑based or IAM program from an early or fragmented state.
• Experience leading incident response for security events and driving post‑incident corrective action.
• Bachelor's degree in a related field or equivalent professional experience.
• Excellent written and verbal communication skills, comfortable presenting security strategy to both engineers and executive leadership.

Preferred

• Experience with cloud security posture management (CSPM) tooling.
• CISSP, CCSP, or a similar security certification.
• Experience in a regulated or compliance‑heavy industry (finance, energy, healthcare).

PowerPlan is an EOE

Applicant Privacy Notice

Please note that this is a hybrid role that involves a combination of onsite work from our corporate office as well as work from home. While we strive to accommodate flexible working arrangements when sensible, there will be times when onsite work is required. This could include scheduled office days, team meetings, client meetings, or special events.