Senior Cloud Security Engineer: Automation & IaC

International Business Machines Corporation; San Jose (CA); On-site; USD 150,000 - 250,000; Full time

Job summary

IBM in San Jose is seeking a senior Cloud Security Engineer with a strong software and infrastructure background to design and build scalable security capabilities across AWS, Azure, GCP and other cloud environments. You will engineer preventative controls, automated guardrails, and secure-by-default patterns that enable engineering teams to move quickly while managing cloud risk.

You will mentor engineers, drive architecture reviews, and collaborate with platform, infra, product, and security

Qualifications

• Strong software engineering background with production systems experience.
• Hands-on cloud security in AWS and/or Azure, IAM and networking knowledge.
• Experience designing reusable, secure IaC patterns and guardrails.
• Ability to integrate security into CI/CD and engineering workflows.
• Ability to lead complex security initiatives and communicate trade-offs.

Responsibilities

• Lead design and implementation of cloud security across AWS, Azure, GCP and others.
• Build production-grade security tooling and automation using Go and Python.
• Design guardrails and preventative controls using Terraform for secure deployments.
• Establish scalable security patterns across IAM, networking, containers, secrets, PKI.
• Integrate security controls into CI/CD and developer workflows.
• Provide technical leadership and mentor engineers in cloud security engineering.
• Identify systemic risks and translate into reusable engineering patterns.
• Collaborate with platform, infra, product and security teams on architecture reviews.
• Improve CSPM/CNAPP capabilities and disk, detection, and monitoring tooling.

Skills

Strong software engineering

Cloud security experience (AWS/Azure)

Infrastructure as Code (Terraform)

CI/CD security integration

Leadership / technical direction

Go / Golang or Python

Tools

Terraform

Go

Python

Job description

IBM in San Jose is seeking a senior Cloud Security Engineer with a strong software and infrastructure background to design and build scalable security capabilities across AWS, Azure, GCP and other cloud environments. You will engineer preventative controls, automated guardrails, and secure-by-default patterns that enable engineering teams to move quickly while managing cloud risk.

You will mentor engineers, drive architecture reviews, and collaborate with platform, infra, product, and security