Cloud Security Engineer

RISCPoint is hiring a Cloud Security Engineer to design, implement, and govern secure Infrastructure-as-Code environments. The role focuses on building scalable, automated, security-first cloud solutions aligned to best practices and regulatory frameworks across AWS, Azure, and/or GCP.

• Design, implement, and maintain CI/CD pipelines with automated security gates and policy-as-code checks,
• Build and maintain a library of secure reusable Terraform modules encoding compliance requirements,
• Own security architecture decisions across cloud deployments (IAM, network segmentation, secrets management, logging and monitoring, encryption),
• Partner with client engineering and compliance teams to translate regulatory and security requirements into infrastructure solutions,
• Document and communicate security/compliance implementation details

You will own CI/CD pipeline design that enforces automated security gates and policy-as-code checks, and build secure reusable Terraform modules that encode compliance requirements. You will also make security-by-design architecture decisions across IAM, network segmentation, secrets management, logging/monitoring, and encryption controls.

The ideal candidate is a senior Cloud Security Engineer who has led secure Infrastructure-as-Code (IaC) development using Terraform and designed CI/CD pipelines with automated security gates and policy-as-code checks. They have strong security-by-design experience across IAM, network segmentation, secrets management, and logging/monitoring, with practical compliance mapping to FedRAMP, SOC 2, and ISO 27001 on AWS, Azure, and/or GCP.