Senior Cloud Security Engineer - IaC & Automation

International Business Machines Corporation; Austin (TX); On-site; USD 180,000 - 230,000; Full time

Job summary

IBM Software is seeking a senior Cloud Security Engineer with a strong software and infrastructure background to design scalable security capabilities across AWS, Azure, and GCP. You’ll build automated guardrails and secure-by-default patterns that help engineering teams move fast while reducing cloud risk.

You will mentor engineers, lead architecture reviews, and collaborate with platform, infrastructure, product, and security teams to advance secure cloud design.

Qualifications

• Strong software engineering background with production systems experience.
• Hands-on cloud security experience with AWS and/or Azure.
• Deep knowledge of Terraform and IaC patterns for secure deployments.
• Experience integrating security into CI/CD and engineering workflows.
• Ability to lead complex cloud security initiatives across multiple teams.

Responsibilities

• Lead design and implementation of cloud security architecture and engineering solutions across AWS, Azure, GCP, and other cloud environments.
• Architect and build production-quality security tooling and automation using Go/Golang and Python, integrating security directly into infrastructure and engineering workflows.
• Design preventative security controls and automated guardrails using Terraform and Infrastructure as Code (IaC), enabling secure-by-default cloud deployments.
• Establish scalable security patterns across IAM, cloud networking, workload identity, containers/Kubernetes, secrets management, PKI, and workload protection.
• Design and integrate security controls into CI/CD pipelines, infrastructure provisioning, and developer workflows, shifting security earlier into the engineering lifecycle.
• Provide technical leadership for complex cloud security initiatives, independently driving solutions from architecture and design through implementation and operationalization.
• Identify systemic cloud security risks and translate them into reusable engineering patterns, automation, detections, and preventative controls rather than relying solely on manual remediation.
• Partner with platform, infrastructure, product, and security engineering teams to conduct architecture reviews and influence the design of secure cloud services.
• Improve CSPM/CNAPP, vulnerability management, detection, and cloud security monitoring capabilities and translate findings into engineering improvements.
• Research emerging cloud attack techniques and technologies and apply those insights to evolving cloud security architecture.
• Mentor engineers and provide technical direction on cloud security engineering, automation, and secure infrastructure design.

Skills

Go/Golang

Python

Cloud security engineering

Infrastructure as Code

Leadership

Tools

AWS

Azure

Terraform

Kubernetes

Job description

IBM Software is seeking a senior Cloud Security Engineer with a strong software and infrastructure background to design scalable security capabilities across AWS, Azure, and GCP. You’ll build automated guardrails and secure-by-default patterns that help engineering teams move fast while reducing cloud risk.

You will mentor engineers, lead architecture reviews, and collaborate with platform, infrastructure, product, and security teams to advance secure cloud design.