Senior Cloud Security Engineer (IAM, IaC & Zero Trust)

Merck; Cheyenne (WY); Remote; USD 142,000 - 224,000; Full time

Job summary

Merck is seeking a Cloud Security Engineer to design, implement, and automate security controls across enterprise cloud environments. This role collaborates with Cloud, Application, DevOps, and Security teams to ensure secure cloud deployments.

You'll secure identities, networks, data, containers, and APIs across AWS, Azure, and GCP, and build guardrails using IaC and policy-as-code. The position offers a comprehensive benefits package and competitive compensation.

Qualifications

• Bachelor's degree required.
• Minimum 8 years of cloud architecture and security experience (AWS/Azure/GCP).
• Hands-on IAM, cloud networking, encryption, secrets management, and workload security.
• Experience with Infrastructure as Code technologies.
• Experience with Git, CI/CD, Python, PowerShell, Bash, or similar automation.
• Understanding of Kubernetes and container security.
• Familiarity with cloud security platforms like Wiz and AWS Security Hub.
• Strong troubleshooting, analytical, and communication skills.

Responsibilities

• Design and implement security controls across AWS, Azure, and/or GCP.
• Secure cloud identity, networking, workloads, data, containers, and APIs.
• Build security guardrails using Infrastructure as Code and policy-as-code.
• Integrate security into CI/CD pipelines and cloud deployment processes.
• Identify and remediate misconfigurations, excessive permissions, and attack paths.
• Support cloud security monitoring, logging, threat detection, and incident response.
• Partner with engineering teams to provide security guidance and architecture reviews.

Skills

AWS Security

Application Security

Cloud Operations

Cloud Security Architecture

Container Security

Data Protection

GCP

Infrastructure As Code

Kubernetes

Zero Trust Identity

Education

Bachelor's degree

Tools

Wiz

AWS Security Hub

Job description

Merck is seeking a Cloud Security Engineer to design, implement, and automate security controls across enterprise cloud environments. This role collaborates with Cloud, Application, DevOps, and Security teams to ensure secure cloud deployments.

You'll secure identities, networks, data, containers, and APIs across AWS, Azure, and GCP, and build guardrails using IaC and policy-as-code. The position offers a comprehensive benefits package and competitive compensation.