Senior Cloud Security Engineer — AWS & GCP

Insight Global; Reston (VA); On-site; USD 140,000 - 200,000; Full time

Job summary

Insight Global is seeking experienced Cloud Security Engineers to drive security controls across AWS and Google Cloud Platform in a large multi-cloud environment. The role emphasizes practical implementation, automation, and integration with platform and application teams.

Ideal candidates bring hands-on expertise in cloud-native security, IAM, IaC, Kubernetes security, logging, and incident response, with a focus on secure, scalable, and compliant cloud deployments.

Qualifications

• Hands-on cloud security engineering in AWS and multi-clouds.
• Deep IAM and OIDC federation experience.
• Experience with IaC tools (Terraform, CloudFormation, CDK).
• Kubernetes security and container security expertise.
• Strong logging, monitoring, and SIEM integration skills.
• Experience with credential rotation and short-lived credentials.
• Ability to operate in multi-account AWS environments.
• Proficient scripting in Python or Go.
• Knowledge of security guardrails, policies, and RBAC.
• Familiarity with GitHub Actions OIDC for AWS.

Responsibilities

• Design, implement, and automate cloud security controls across AWS and GCP environments.
• Implement modern authentication and authorization solutions (IAM, OIDC, workload identity federation).
• Develop guardrails and data perimeter protections to reduce exposure risks.
• Build IaC and automation to support security deployment, credential management, and compliance reporting.
• Enable cloud audit logging, SIEM pipelines, detections, and incident response capabilities.
• Develop detections and automated response for credential abuse and anomalous activity.
• Harden Kubernetes and containerized environments with secure patterns and access controls.
• Protect internet-facing apps with Cloudflare WAF, DDoS protection, and secure ingress patterns.
• Identify vulnerabilities and remediate exposed resources through testing and monitoring.
• Collaborate with cloud, platform, and app teams to improve security posture in large-scale environments.

Skills

Cloud security engineering

AWS IAM & OIDC

IaC (Terraform, CloudFormation, CDK)

Kubernetes security

Logging & SIEM (Splunk, Sentinel)

Credential rotation & short-lived cred

Cross-account AWS multi-account

Python/Go scripting

Security policies & guardrails

GitHub Actions OIDC for AWS

Tools

Terraform

CloudFormation

CDK

GitHub Actions

Job description

Insight Global is seeking experienced Cloud Security Engineers to drive security controls across AWS and Google Cloud Platform in a large multi-cloud environment. The role emphasizes practical implementation, automation, and integration with platform and application teams.

Ideal candidates bring hands-on expertise in cloud-native security, IAM, IaC, Kubernetes security, logging, and incident response, with a focus on secure, scalable, and compliant cloud deployments.