Senior Cloud Security Engineer - Hands-on & Compliance

inspiracareers; Oak Brook (IL); Hybrid; USD 160,000 - 190,000; Full time

Job summary

The candidate will drive vulnerability management, CSPM/DSPM tooling, IaC security, CI/CD security, and audit readiness, while mentoring engineers and contributing to architecture reviews.

Qualifications

• 10+ years of experience in cloud engineering, infrastructure, or security engineering.
• Bachelor's Degree in Computer Science, Software/Computing Engineering, Information Security, or related field.
• Technical certifications such as AZ-500, SC-100, SC-200, AZ-104 preferred.
• Experience in regulated industries (Financial services, Insurance, Health-Tech) preferred.
• Familiarity with NIST, HIPAA, and MSBs.

Responsibilities

• Remediate infrastructure and cloud vulnerabilities with SLA-driven actions.
• Operate CSPM/DSPM tooling for coverage, remediation, and reporting.
• Fix misconfigurations across Azure subscriptions and infrastructure.
• Implement security controls across cloud-native services, IaaS, PaaS, and containers.
• Maintain secure configurations with firewalls, network security, and app delivery infra.
• Assist with credential hygiene, certificate lifecycle, and secrets governance.
• Support OS hardening and compliance-as-code practices.
• Monitor compliance posture against policies and regulatory frameworks.
• Collaborate on CI/CD security, IaC security, and secure architecture reviews.
• Provide technical leadership and mentorship across teams; participate in audits.

Skills

Cloud security

Vulnerability remediation

Audit & compliance

CI/CD security

Security leadership

Cross-team collaboration

TLS/PKI management

IaC security

Threat monitoring

Policy development

Education

Bachelor's Degree in Computer Science, Software/Computing Engineering, Information Security, or related field

Tools

Azure

Azure AD/Entra

AKS

Azure Key Vault

Azure Policy

Microsoft Defender for Cloud

Microsoft Sentinel

Rapid7

Wiz

Orca Security

Datadog

Terraform

ARM / Bicep

CI/CD (Azure DevOps, GitHub)

PKI/TLS management

Active Directory/Entra ID

PIM/ RBAC

ExpressRoute/VPN

NSGs/Firewall/WAF

Job description

The candidate will drive vulnerability management, CSPM/DSPM tooling, IaC security, CI/CD security, and audit readiness, while mentoring engineers and contributing to architecture reviews.