Senior Cloud Security Engineer - AWS & PKI Lead

Guardian Life; New York (NY); Hybrid; USD 119,000 - 195,000; Full time

Job summary

Guardian Life is seeking a Senior Cloud Security Engineer to advance cloud security capabilities across our AWS footprint. You will translate complex requirements into scalable, practical security controls and partner with Cloud Engineering, DevOps, Architecture, and Compliance teams.

You will implement identity controls, encryption strategies, and CNAPP/CSPM integrations while driving secure adoption of AWS services and enforcing governance across the lifecycle.

Qualifications

• 5+ years in IT, cybersecurity, cloud engineering, or related disciplines.
• 5+ years of hands-on AWS security experience, including IAM, PKI, CSPM, CNAPP capabilities.
• Experience designing and implementing AWS identity controls (IAM Identity Center, SCPs, cross-account access, RBAC/ABAC).
• Experience deploying AWS KMS, ACM, and enterprise PKI capabilities.
• Experience implementing CNAPP and CSPM platforms (Wiz, Prisma Cloud, AWS Security Hub).
• Strong understanding of cloud security principles (zero trust, encryption, workload/container security).
• Experience with IaC and security automation (Terraform, CloudFormation, CI/CD, shift-left).
• Experience with security/compliance frameworks (NIST, CIS, SOC 2, SOX, NYDFS, MAR)
• AWS Well-Architected Security Pillar

Responsibilities

• Implement and improve AWS security capabilities spanning identity, cryptography, and CNAPP/CSPM.
• Engineer scalable AWS access controls and least-privilege patterns.
• Enhance cloud security controls for monitoring, threat detection, vulnerability management, and automated remediation.
• Integrate security with CNAPP and CSPM platforms across code-to-runtime.
• Manage cloud cryptographic capabilities (KMS, ACM, PKI integrations).
• Assess security landscape, identify gaps, and drive improvements across domains.
• Collaborate to translate requirements into designs, guardrails, and reusable patterns.
• Develop automation to embed security into IaC/CI/CD and detect risks earlier.
• Produce reporting, documentation, and runbooks for audit readiness.
• Establish cloud governance aligned with security, regulatory, and audit requirements.
• Stay current on AWS security and CNAPP trends to strengthen Guardian's posture.

Skills

AWS security

CNAPP

CSPM

IAM

PKI

KMS

ACM

IaC

Terraform

CloudFormation

CI/CD

Security automation

Education

Bachelor's degree in CS/Information Security

Tools

Wiz

Prisma Cloud

AWS Security Hub

Job description

Guardian Life is seeking a Senior Cloud Security Engineer to advance cloud security capabilities across our AWS footprint. You will translate complex requirements into scalable, practical security controls and partner with Cloud Engineering, DevOps, Architecture, and Compliance teams.

You will implement identity controls, encryption strategies, and CNAPP/CSPM integrations while driving secure adoption of AWS services and enforcing governance across the lifecycle.