Senior Cloud Security Engineer

Guardian Life; Holmdel Township, New York, Bethlehem (NJ, NY, Northampton County); Hybrid; USD 119,000 - 195,000; Full time

Job summary

Guardian Life seeks a hands-on Senior Cloud Security Engineer to advance security across cloud environments. You will translate security requirements into scalable engineering solutions, build robust identity controls, and automate remediation across code and runtime.

You will partner with Cloud Engineering, DevOps, Architecture, Cybersecurity, Compliance, and application teams to strengthen posture and support compliant, secure AWS adoption. Hybrid work in Holmdel/Bethlehem/NY locations.

Qualifications

• 5+ years in IT, cybersecurity, cloud engineering, or related fields.
• 5+ years of hands-on AWS security experience with IAM, PKI, CSPM, CNAPP.
• Experience designing AWS identity controls, cross-account access, and least- privilege models.
• Experience with CNAPP and CSPM platforms like Wiz, Prisma Cloud, AWS Security Hub.

Responsibilities

• Implement and improve AWS security across identity, cryptography, and PKI.
• Engineer scalable AWS access controls: IAM policies, SCPs, cross-account access, least privilege.
• Enhance cloud security controls for monitoring, threat detection, and remediation.
• Integrate AWS security with CNAPP and CSPM platforms; operationalize controls from code to runtime.
• Develop automation in IaC and CI/CD to identify and remediate risk earlier in development.
• Collaborate with architecture, DevOps, Compliance, and application teams to align security with strategy.

Skills

AWS security

IAM

PKI

CNAPP

CSPM

KMS

ACM

SCPs

RBAC/ABAC

Terraform

CloudFormation

CI/CD

Shift-left security

NIST/CIS/SOC 2/SOX/MAR

Well-Architected Security Pillar

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

CloudFormation

AWS IAM

KMS

ACM

Job description

Senior Cloud Security Engineer# Careers## Senior Cloud Security EngineerApply: Hybrid - In office 3 days per week: Holmdel: Bethlehem: New York: Full time: Posted Yesterday: R000110544**Position Summary*** Do you want to help engineer the cloud security capabilities that protect Guardian’s applications, data, and technology as we continue to expand our use of AWS?* Guardian is seeking a Senior Cloud Security Engineer to implement and continuously improve security capabilities across our cloud environment.* Reporting to the Head of Security Platforms, this role will serve as a senior technical contributor across Cloud-Native Application Protection (CNAPP), Cloud Security Posture Management (CSPM), AWS-native identity security controls and services, Public Key Infrastructure (PKI), and other cloud security controls within a complex, highly regulated environment.* This role is responsible for translating security and architecture requirements into scalable engineering solutions, strengthening controls across the cloud lifecycle from code to runtime, and helping teams identify and address cloud security risk.* The successful candidate will partner closely with Cloud Engineering, DevOps, Architecture, Cybersecurity, Compliance, and application teams to automate security controls, perform advanced threat and security analysis, improve cloud security posture, and enable the secure adoption of AWS services. **You are*** A hands-on cloud security engineer who can translate complex security requirements into practical, scalable solutions.* Experienced working across cloud engineering, cybersecurity, architecture, DevOps, and application teams to solve security challenges without creating unnecessary friction.* Analytical and curious, with the ability to assess cloud security risks, identify gaps, and drive technical improvements from design through runtime.* Comfortable operating in a complex, fast-paced environment, balancing multiple priorities while maintaining a strong focus on security, resiliency, and compliance.* A strong communicator who can explain technical risks and solutions to both technical and non-technical stakeholders.* Passionate about staying current with emerging cloud threats, security technologies, and engineering practices.* Bold, relentless, curious, and collaborative, with a desire to make an impact as part of a transformational organization. **You have (Required Qualifications**):* 5+ years of experience in IT, cybersecurity, cloud engineering, or related disciplines.* 5+ years of hands-on AWS security experience, including strong knowledge of IAM, PKI, CSPM, and CNAPP capabilities.* Hands-on experience designing and implementing AWS identity controls, including IAM Identity Center, least-privilege policies, Service Control Policies (SCPs), cross-account access, and RBAC/ABAC models.* Experience deploying and managing AWS Key Management Service (KMS), AWS Certificate Manager (ACM), and enterprise PKI capabilities.* Experience implementing or operating CNAPP and CSPM platforms, such as Wiz, Prisma Cloud, and AWS Security Hub for posture management, workload protection, risk prioritization, and remediation.* Strong understanding of cloud security principles, including zero trust, encryption at rest and in transit, workload and container security, identity boundaries, and network security.* Experience with Infrastructure as Code (IaC) and security automation using technologies such as Terraform, CloudFormation, CI/CD pipelines, and shift-left security practices.* Experience with security and compliance frameworks such as NIST, CIS, SOC 2, SOX, NYDFS, and Model Audit Rule (MAR), as well as the AWS Well-Architected Framework Security Pillar. **Preferred Qualifications:*** A bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.* Experience supporting security technology evaluations, including RFP/RFI processes, vendor assessments, and proofs of concept.* Relevant certifications such as AWS Certified Security - Specialty, CISSP, or CCSP are preferred. **You will (Responsibilities):*** Implement, and continuously improve AWS security capabilities spanning identity, cryptography and PKI, cloud security posture, and cloud-native application protection.* Engineer scalable AWS access controls, including IAM policies, SCPs, cross-account access models, and least-privilege patterns.* Implement and enhance cloud security controls for continuous monitoring, threat detection, vulnerability management, workload protection, and automated remediation across the application lifecycle.* Integrate AWS security capabilities with enterprise CNAPP and CSPM platforms and help operationalize security controls from code through runtime.* Manage and enhance cloud cryptographic capabilities, including AWS KMS, ACM, encryption controls, certificate management, and enterprise PKI integrations.* Assess the AWS security landscape, identify control gaps and emerging risks, and drive improvements across identity, encryption, workloads, containers, and other cloud security domains.* Partner with Cloud Architecture, DevOps, application teams, and business stakeholders to gather requirements and translate them into technical designs, reusable security patterns, and guardrails.* Develop automation and integrate security controls into Infrastructure as Code and CI/CD processes to identify and remediate risk earlier in the development lifecycle.* Perform advanced analysis of cloud security posture and runtime risks and develop meaningful reporting, documentation, and presentations for technical and business stakeholders.* Establish and support cloud governance and control processes aligned with enterprise security, regulatory, and audit requirements.* Develop engineering documentation and operational runbooks that improve consistency, scalability, and audit readiness.* Collaborate across Cybersecurity, Architecture, Cloud Engineering, Infrastructure, Compliance, and application teams to ensure cloud security capabilities align with enterprise strategy.* Stay current on AWS security capabilities, CNAPP technologies, cloud-native threats, cryptographic technologies, and industry best practices, and apply that knowledge to continuously strengthen Guardian's cloud security posture. **Reporting Relationships*** As a Senior Cloud Engineer, you will report to our Head of Security Platforms who reports to our Head of Security Engineering. **Location*** Hybrid work arrangement requiring 3 days per week in the office, with work location based in either Holmdel, NJ; New York, NY; or Bethlehem, PA **Salary Range:**$118,980.00 - $195,465.00The salary range reflected above is a good faith estimate of base pay for the primary location of the position. The salary for this position ultimately will be determined based on the education, experience, knowledge, and abilities of the successful candidate. In addition to salary, this role may also be eligible for annual, sales, or other incentive compensation.