Senior Cloud Security Engineer - IAM, IaC & CI/CD

Merck; Rahway (NJ); Remote; USD 142,000 - 224,000; Full time

Benefits offered by this job

Remote work

Job summary

Merck in Rahway, NJ is seeking a Cloud Security Engineer to design, implement, and automate security controls across AWS, Azure, and GCP. You will partner with Cloud, Application, DevOps, and Security teams to ensure secure, scalable cloud deployments.

The role requires 8+ years in cloud security architecture, hands-on IAM, networking, encryption, IaC, and container security. You will drive security in CI/CD, support incident response, and guide engineering with practical architecture reviews.

Qualifications

• Bachelor's degree required.
• 8+ years of cloud security experience in AWS/Azure/GCP.
• Hands-on IAM, cloud networking, encryption, and secrets management.
• Experience with Infrastructure as Code technologies.
• Experience with Git, CI/CD, Python, PowerShell, Bash.
• Understanding of Kubernetes and container security.
• Familiarity with Wiz, AWS Security Hub, etc.
• Strong troubleshooting and communication skills.

Responsibilities

• Design and implement security controls across AWS, Azure, and GCP.
• Secure cloud identity, networking, workloads, data, containers, and APIs.
• Build guardrails via IaC and policy-as-code.
• Integrate security into CI/CD pipelines and cloud deployment processes.
• Identify and remediate cloud misconfigurations, vulnerabilities, excessive permissions, and attack paths.
• Support cloud security monitoring, logging, threat detection, and incident response.
• Partner with engineering teams to provide practical security guidance and architecture reviews.

Skills

AWS

Azure

GCP

IAM

Cloud networking

Encryption

Secrets management

Workload security

Infrastructure as Code

CI/CD

Python

PowerShell

Bash

Kubernetes

Container security

Zero Trust

NIST

Education

Bachelor's degree

Tools

Terraform

Job description

Merck in Rahway, NJ is seeking a Cloud Security Engineer to design, implement, and automate security controls across AWS, Azure, and GCP. You will partner with Cloud, Application, DevOps, and Security teams to ensure secure, scalable cloud deployments.

The role requires 8+ years in cloud security architecture, hands-on IAM, networking, encryption, IaC, and container security. You will drive security in CI/CD, support incident response, and guide engineering with practical architecture reviews.