Senior Cloud Security Engineer: Policy-as-Code & Terraform

ISITE TECHNOLOGIES; Alpharetta (GA); On-site; USD 130,000 - 180,000; Full time

Job summary

ISITE TECHNOLOGIES is seeking a senior cloud security engineer with 7+ years of hands-on experience in cloud security, infrastructure-as-code, and deployment pipelines. The role focuses on policy-as-code using OPA/Rego and Regula in production.

You will design and implement policy controls, integrate security into CI/CD pipelines, and architect secure patterns across AWS/Azure/GCP, including IAM, networking, and data protection.

Qualifications

• 7+ years hands-on experience in cloud security engineering.
• Experience designing and implementing policy-as-code controls in production.
• Terraform module design, state management, and secure configurations.
• Strong experience integrating security controls into CI/CD pipelines with gating and enforcement.
• Translate security requirements into automated, testable deploy-time controls.
• Cloud security architectures across AWS/Azure/GCP, including IAM, networking, and data protection controls.
• Experience implementing control validation, testing strategies, and drift detection.

Responsibilities

• Design and implement policy-as-code controls in production environments.
• Integrate security controls into CI/CD pipelines, including gating and enforcement mechanisms.
• Translate security requirements into automated, testable deploy-time controls.
• Mentor peers in policy-as-code, Terraform, and secure pipeline practices.
• Contribute to enterprise-scale reusable policy libraries and shared control frameworks.

Skills

OPA/Rego

Policy as Code

Terraform

CI/CD security

Gating and enforcement

Cloud security architecture

IAM security

Networking security

Threat modeling

Threat prevention controls

Tools

Regula

CSPM platforms

GitHub Actions

CI/CD tooling

Job description

ISITE TECHNOLOGIES is seeking a senior cloud security engineer with 7+ years of hands-on experience in cloud security, infrastructure-as-code, and deployment pipelines. The role focuses on policy-as-code using OPA/Rego and Regula in production.

You will design and implement policy controls, integrate security into CI/CD pipelines, and architect secure patterns across AWS/Azure/GCP, including IAM, networking, and data protection.