Senior Cloud Security Engineer

McDonald's; Chicago (IL); On-site; USD 142,000 - 177,000; Full time

Job summary

McDonald’s Global Technology is hiring a Cloud Security Engineer III to design and operate CNAPP platforms across AWS, Azure, and GCP. You will implement guardrails, automate remediation, and integrate security controls into CI/CD pipelines while partnering with multiple teams to enable secure cloud adoption at enterprise scale.

The role emphasizes IaC with Terraform, policy-as-code, and scripting using Python/PowerShell/Bash.

Qualifications

• 5+ years of cloud security engineering, cloud security platform engineering, or cloud security architecture across AWS, Azure, or GCP.
• Hands-on experience with enterprise CNAPP or cloud security platform (e.g., Wiz, Prisma Cloud, Defender for Cloud, Orca).
• Strong knowledge of CSPM, vulnerability management, IAM, network security, and incident response.
• Experience integrating security controls into CI/CD pipelines and policy-as-code.

Responsibilities

• Engineer and operate CNAPP and cloud security across AWS, Azure, and GCP.
• Configure and maintain cloud security policies, connectors, APIs, and remediation workflows.
• Implement guardrails using AWS Organizations, Azure Policy, and Google Org Policy.
• Develop reusable Terraform modules and policy-as-code to deploy controls.
• Integrate security checks into CI/CD workflows and SIEM/SOHAR processes.
• Analyze findings to drive remediation and risk reduction.

Skills

Cloud security

CNAPP

CSPM

Terraform

CI/CD

APIs

Python

PowerShell

Bash

Go

IAM

Education

Bachelor’s degree

Tools

Wiz

Palo Alto Prisma Cloud

Microsoft Defender for Cloud

Orca Security

Job description

McDonald’s Global Technology is hiring a Cloud Security Engineer III to design and operate CNAPP platforms across AWS, Azure, and GCP. You will implement guardrails, automate remediation, and integrate security controls into CI/CD pipelines while partnering with multiple teams to enable secure cloud adoption at enterprise scale.

The role emphasizes IaC with Terraform, policy-as-code, and scripting using Python/PowerShell/Bash.