Senior Cloud Security Engineer: AWS & CNAPP Expert

Guardian Life; Town of Bethlehem (NY); Hybrid; USD 119,000 - 195,000; Full time

Job summary

Guardian Life is seeking a Senior Cloud Security Engineer to advance security across our AWS environment. You will translate complex security requirements into scalable engineering solutions and partner with Cloud Engineering, DevOps, Architecture, Cybersecurity, Compliance, and application teams to automate controls.

You will implement and operate CNAPP and CSPM platforms, design identity controls, manage PKI capabilities, and stay ahead of evolving cloud threats, while ensuring regulatory

Qualifications

• 5+ years in IT/cybersecurity/cloud engineering or related fields.
• 5+ years of hands-on AWS security experience, including IAM, PKI, CSPM, CNAPP.
• Experience designing and implementing AWS identity controls (IAM Identity Center, least-privilege policies, SCPs, cross-account access, RBAC/ABAC).
• Experience deploying AWS KMS, ACM, and enterprise PKI capabilities.
• Experience with CNAPP and CSPM platforms (e.g., Wiz, Prisma Cloud, AWS Security Hub) for posture management and remediation.
• Strong understanding of cloud security principles (zero trust, encryption, workloads, containers, identity, network).
• Experience with IaC and security automation (Terraform, CloudFormation, CI/CD, shift-left security).
• Familiarity with NIST, CIS, SOC 2, SOX, NYDFS, MAR and AWS Well-Architected Framework Security Pillar.

Responsibilities

• Implement and continuously improve AWS security capabilities across identity, cryptography, posture, and CNAPP/CSPM.
• Engineer scalable AWS access controls (IAM policies, SCPs, cross-account access, least-privilege patterns).
• Enhance cloud security controls for monitoring, vulnerability management, workload protection, and automated remediation.
• Integrate AWS security with enterprise CNAPP and CSPM platforms; operationalize controls from code through runtime.
• Manage cloud cryptography (KMS, ACM) and PKI integrations; ensure regulatory alignment.
• Assess security posture, identify gaps, and drive improvements across identity, encryption, workloads, containers.
• Collaborate with Cloud Architecture, DevOps, apps teams, and business stakeholders to translate requirements into designs and guardrails.
• Develop automation to embed security in IaC/CI/CD; enable early risk remediation.
• Produce analysis, reporting, and runbooks to improve audit readiness and governance.
• Collaborate across teams to align security capabilities with enterprise strategy.
• Stay current on AWS security capabilities, CNAPP technologies, and cloud threats.

Skills

AWS security

IAM

CNAPP/CSPM

Security architecture

Zero trust

Encryption

IaC security

Education

Bachelor's degree in Computer Science/Information Security or related field

Tools

Wiz

Prisma Cloud

AWS Security Hub

Terraform

CloudFormation

Job description

Guardian Life is seeking a Senior Cloud Security Engineer to advance security across our AWS environment. You will translate complex security requirements into scalable engineering solutions and partner with Cloud Engineering, DevOps, Architecture, Cybersecurity, Compliance, and application teams to automate controls.

You will implement and operate CNAPP and CSPM platforms, design identity controls, manage PKI capabilities, and stay ahead of evolving cloud threats, while ensuring regulatory