Senior Cloud Security Engineer — Multi-Cloud & IaC

Nortal; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Nortal is seeking a Senior Cloud Security Engineer to assess and strengthen a multi-cloud infrastructure. You will identify security gaps across Azure/AWS, review IaC and edge configurations, and define hardening baselines. Collaboration with cloud and infrastructure teams is essential to implement remediation actions.

Bring hands-on Azure security expertise, Kubernetes experience, and familiarity with Terraform/OpenTofu. Certifications such as AZ-500 or CCSP are a plus.

Qualifications

• Approximately 8 years of experience in cloud or infrastructure engineering, with a strong focus on security.
• Deep hands-on expertise in Microsoft Azure security and working knowledge of AWS.
• Practical experience securing Kubernetes environments.
• Experience with Terraform or OpenTofu.
• Hands-on experience using AI assistants to review infrastructure code and configuration for security issues.
• Ability to assess complex infrastructure environments, identify security weaknesses and recommend remediation actions.
• Knowledge of service mesh security, particularly Istio, would be an advantage.
• Ability to read and understand Ansible and Chef configurations would be an advantage.
• Relevant certifications, such as AZ-500, AWS Certified Security – Specialty or CCSP, would be an advantage.
• Experience with cloud security posture management tools, such as Microsoft Defender for Cloud, Wiz or equivalent solutions, would be an advantage.
• Experience securing and bringing legacy infrastructure environments without established Infrastructure as Code practices under structured management would be an advantage.

Responsibilities

• Assess the security of Azure infrastructure, including AKS, Istio, API Management, Application Gateway, Front Door, Azure Firewall, hub-and-spoke networking and Key Vault, as well as selected AWS services, including ECS, EC2, Lambda, API Gateway and VPC.
• Review edge security configurations across Cloudflare, Azure Front Door and Application Gateway, focusing on WAF rules, TLS configuration and security headers.
• Evaluate the security posture of the virtual machine estate, including over 500 SQL Server agency databases and legacy applications hosted on static virtual machines.
• Review Infrastructure as Code and configuration management practices using Terraform, OpenTofu, Ansible and Chef.
• Identify security gaps, define infrastructure hardening baselines and prioritize remediation activities.
• Provide actionable recommendations and collaborate with cloud and infrastructure engineers to implement security improvements.
• Use AI-assisted tools to support the review of infrastructure code and configuration.

Skills

Cloud security

Azure security

AWS

Kubernetes security

AI-assisted security

IaC (Terraform/OpenTofu)

Ansible

Chef

Security reviews

Networking security

Tools

Terraform

OpenTofu

Ansible

Chef

Cloudflare

Istio

Azure Front Door

Azure Firewall

Job description

Nortal is seeking a Senior Cloud Security Engineer to assess and strengthen a multi-cloud infrastructure. You will identify security gaps across Azure/AWS, review IaC and edge configurations, and define hardening baselines. Collaboration with cloud and infrastructure teams is essential to implement remediation actions.

Bring hands-on Azure security expertise, Kubernetes experience, and familiarity with Terraform/OpenTofu. Certifications such as AZ-500 or CCSP are a plus.