Senior Cloud Security Engineer – IAM, IaC & Zero Trust

Merck; Montpelier (VT); Remote; USD 142,000 - 224,000; Full time

Job summary

Merck seeks a Cloud Security Engineer to design, implement, and automate security controls across enterprise cloud environments. You will partner with Cloud, Application, DevOps, and Security teams to ensure secure deployment of cloud services.

Responsibilities include securing AWS/Azure/GCP, building IaC guardrails, integrating security into CI/CD, and guiding engineering with security reviews.

Qualifications

• Bachelor's degree required.
• 8+ years of AWS, Azure, or GCP architecture and security experience.
• Hands-on with IAM, cloud networking, encryption, secrets management, workload security.
• Experience with Infrastructure as Code technologies.
• Experience with Git, CI/CD, Python, PowerShell, Bash, or similar automation.
• Understanding of Kubernetes and container security.
• Familiarity with cloud security platforms such as Wiz, AWS Security Hub.
• Strong troubleshooting, analytical, and communication skills.

Responsibilities

• Design and implement security controls across AWS, Azure, and/or GCP.
• Secure cloud identity, networking, workloads, data, containers, and APIs.
• Build security guardrails using IaC and policy-as-code.
• Integrate security into CI/CD pipelines and cloud deployment processes.
• Identify and remediate cloud misconfigurations, vulnerabilities, excessive permissions, and attack paths.
• Support cloud security monitoring, logging, threat detection, and incident response.
• Partner with engineering teams to provide practical security guidance and architecture reviews.

Skills

IAM

Cloud networking

Encryption

Secrets management

Workload security

IaC

Git/CI-CD

Python

PowerShell

Bash

Kubernetes

Security platforms

Education

Bachelor's degree

Tools

Terraform

Job description

Merck seeks a Cloud Security Engineer to design, implement, and automate security controls across enterprise cloud environments. You will partner with Cloud, Application, DevOps, and Security teams to ensure secure deployment of cloud services.

Responsibilities include securing AWS/Azure/GCP, building IaC guardrails, integrating security into CI/CD, and guiding engineering with security reviews.