Senior Cloud Security Engineer

PowerPlan; Atlanta (GA); On-site; USD 140,000 - 190,000; Full time

Job summary

PowerPlan is seeking a Senior Cloud Security Engineer to build cloud security and IAM maturity programs across AWS and Azure. You will own compliance, identity strategy, and security automation as a senior IC, influencing Cloud Engineering and executive stakeholders from day one.

In this hybrid role, you will shape roadmaps, drive least-privilege enforcement, and turn requirements into production-grade Terraform modules and Python/PowerShell automation, partnering with security and engineering

Qualifications

• 8+ years in cloud/security engineering with hands-on AWS and Azure work.
• Experience implementing CIS, NIST, or SOC 2 at scale.
• Strong IAM design incl. federation, RBAC/ABAC, and privileged access.
• Proficiency in Python and PowerShell for automation; Terraform experience.
• Translate security requirements into IaC guardrails in CI/CD pipelines.
• Lead incident response for cloud security events and post-incident actions.
• Bachelor's degree or equivalent professional experience.
• Excellent written and verbal communication for engineers and executives.

Responsibilities

• Assess and close security framework gaps in AWS and Azure with a 90-day plan.
• Build an IAM maturity roadmap toward least-privilege and centralized oversight.
• Turn requirements into production-grade code — IaC and automation.
• Serve as security SME in cloud architecture reviews and change advisories.
• Mentor teams on secure defaults and secure-by-design decisions.
• Lead end-to-end incident response for cloud security events.

Skills

AWS & Azure security

IAM design & enforcement

Infrastructure as Code

Python

PowerShell

Terraform

Security frameworks

CI/CD security integration

Executive communication

Mentorship

Education

Bachelor's degree or higher in a related field

Tools

Terraform

Python

PowerShell

Job description

Overview

We're looking for a Senior Cloud Security Engineer to build PowerPlan's cloud security and IAM maturity programs from the ground up, rather than caretake an existing one. As a senior individual contributor, you'll own compliance, identity strategy, and security automation across both AWS and Azure.

Success here means shaping the roadmap leadership acts on, not just executing someone else's plan, with visible influence across Cloud Engineering, Information Security, and executive stakeholders within your first 90 days.

Responsibilities

Success will be measured by how fast compliance gaps close, how real (not aspirational) least-privilege access becomes, and by whether the organization comes to you before it changes its cloud environment, not after.

• Assess and close security framework compliance gaps across AWS and Azure, with a prioritized remediation roadmap by day 90.
• Build an IAM maturity roadmap from the current fragmented state to least-privilege enforcement and centralized oversight.
• Turn security and IAM requirements into enforced, production-grade code — Terraform modules and Python/PowerShell automation.
• Serve as the security subject matter expert in cloud architecture reviews and change advisory processes.
• Mentor Cloud Operations and Engineering teams on secure defaults so security shapes decisions before they ship.
• Lead incident response for cloud security events end-to-end, from detection through resolution.

Qualifications

• 8+ years of experience in cloud security, infrastructure security, or security engineering, with deep hands-on experience across both AWS and Azure.
• Demonstrated experience implementing security frameworks such as CIS, NIST, or SOC 2 at scale.
• Strong IAM design and implementation background, including federation (SAML, OIDC), RBAC, ABAC, and privileged access management.
• Proficiency in Python and PowerShell for security automation, and hands-on Terraform experience.
• A track record of translating security requirements into infrastructure-as-code guardrails integrated into CI/CD pipelines.
• Experience building or maturing a risk-based or IAM program from an early or fragmented state.
• Experience leading incident response for security events and driving post-incident corrective action.
• Bachelor's degree in a related field or equivalent professional experience.
• Excellent written and verbal communication skills, comfortable presenting security strategy to both engineers and executive leadership.

Preferred

• Experience with cloud security posture management (CSPM) tooling.
• CISSP, CCSP, or a similar security certification.
• Experience in a regulated or compliance-heavy industry (finance, energy, healthcare).

PowerPlan is an EOE

Applicant Privacy Notice

Please note that this is a hybrid role that involves a combination of onsite work from our corporate office as well as work from home. While we strive to accommodate flexible working arrangements when sensible, there will be times when onsite work is required. This could include scheduled office days, team meetings, client meetings, or special events.