Senior Cloud Security Engineer: AWS & Azure, IaC

For our U.S. applicants, CPKC; Kansas City (MO); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Flexible benefits

Pension/retirement plans

Employee share purchase plan

Performance incentive plan

Annual fitness subsidy

Job summary

CPKC is seeking a Cloud Security Engineer to protect and advance our cloud platforms (AWS and Azure). You will implement security controls, work with cloud engineers and stakeholders, and drive security best practices across the enterprise.

Responsibilities include building and maintaining IaC with security controls, encryption, IAM, network segmentation, and incident response. Travel may be required; actively contribute to secure, scalable cloud solutions.

Qualifications

• Post-secondary degree or diploma in Information Technology, Cybersecurity, Computer Science, or related field, or equivalent combination of education and industry experience
• 6+ years of experience in cloud infrastructure, cloud engineering, cybersecurity, or related technical roles
• 4+ years of hands-on experience designing, deploying, and operating production workloads in AWS
• Demonstrated experience with AWS monitoring, governance, and security services (CloudWatch, CloudTrail, AWS Config, GuardDuty, AWS Organizations, IAM, API Gateway, EventBridge, SNS, SQS)
• Experience implementing secure cloud networking, encryption, secrets management, and IaC solutions using VPC, Security Groups, Route 53, Transit Gateway, Azure VNets, Azure Network Security Groups, AWS KMS, AWS Secrets Manager, Azure Key Vault, Terraform, AWS CloudFormation
• Valid passport with ability to travel within Canada and the United States

Responsibilities

• Develop and maintain existing Infrastructure as Code (IaC) solutions to standardize, automate, version-control, and reliably provision security controls in cloud environments
• Implement security best practices, including identity and access management, encryption, network segmentation, secrets management, logging, threat detection, and incident response controls
• Partner with Enterprise Security, Enterprise Architecture, and product teams to ensure cloud environments are secured
• Design, implement, and maintain secure cloud infrastructure solutions across AWS and Azure environments, ensuring scalability, reliability, and operational excellence

Job description

CPKC is seeking a Cloud Security Engineer to protect and advance our cloud platforms (AWS and Azure). You will implement security controls, work with cloud engineers and stakeholders, and drive security best practices across the enterprise.

Responsibilities include building and maintaining IaC with security controls, encryption, IAM, network segmentation, and incident response. Travel may be required; actively contribute to secure, scalable cloud solutions.