Senior Cloud Security Engineer - Secure Platform Expert

Dexian; Washington (District of Columbia); On-site; USD 160,000 - 210,000; Full time

Job summary

Dexian seeks a Cloud Security Engineer to design, implement, and harden secure cloud and data platform architectures across multiple cloud environments. You will partner with engineering, operations, data, networking, and security teams to identify gaps and provide practical guidance to stakeholders.

The role emphasizes secure-by-default patterns, container/Kubernetes hardening, IaC security, threat modeling, and collaboration across platform engineering and security domains.

Qualifications

• Seven+ years in security engineering/architecture with cloud focus.
• Experience designing secure cloud architectures and threat modeling.
• Strong IAM, network security, and secure defaults knowledge.

Responsibilities

• Identify security issues across cloud/data platforms and remediate findings.
• Establish security standards, reference patterns, and guidance for teams.
• Define and implement security controls for cloud-based tools and platforms.
• Harden cloud accounts, identity, networking, encryption, and logging across clouds.
• Review architectures and perform threat modeling for new systems.
• Integrate security into CI/CD and IaC pipelines through scanning and guardrails.

Skills

Cloud security

Threat modeling

Secure defaults

IaC scripting

Python

Communication

Collaboration

Education

Bachelor's degree

Cybersecurity concentration

Tools

Kubernetes

CI/CD tools

IAM tools

Job description

Dexian seeks a Cloud Security Engineer to design, implement, and harden secure cloud and data platform architectures across multiple cloud environments. You will partner with engineering, operations, data, networking, and security teams to identify gaps and provide practical guidance to stakeholders.

The role emphasizes secure-by-default patterns, container/Kubernetes hardening, IaC security, threat modeling, and collaboration across platform engineering and security domains.