The Cloud Engineer II joins the Global Technology Infrastructure & Operations team within the Cloud Ecosystem group. This role focuses on delivering enterprise security platform engineering outcomes, automating security remediations, and supporting DevOps teams to ensure secure cloud resource consumption. Key responsibilities include automating provisioning through pipeline engineering, implementing identity and access management, data protection, and threat detection, while performing penetration testing and gap analysis with cybersecurity partners. The candidate will build prototypes, design dashboards, and create policy-as-code to streamline governance. Required skills include proficiency in at least six domains such as cryptography, infrastructure security, and incident response. Technical requirements include associate-level AWS or Azure certifications, Infrastructure as Code experience using tools like Bicep or Terraform, knowledge of Kubernetes, and programming in languages such as Python, C#, Java, or JavaScript to secure cloud environments.
What does a Cloud Engineer earn?
Median $149317 from 30 postings across 9 companies.
Automate cloud monitoring, security baselines, and remediation through pipeline engineering.
Implement core security capabilities including identity management, data protection, and threat detection.
Perform penetration testing, red/blue teaming, and gap analysis with audit partners.
Support incident response and operations for events occurring within cloud environments.
Design and deploy automated scripts and dashboards to enhance security posture.
Build prototypes and conduct proof of concepts to demonstrate new security values.
Create compliance automation and policy-as-code to streamline cloud governance.
Act as a subject matter expert to provide technical guidance on cloud security questions.
What we're looking for
Must possess associate-level cloud certifications from AWS or Azure.
Must have strong technical knowledge in at least six specific security domains including cryptography, identity management, infrastructure security, and incident response.
Ability to create system flow diagrams, data flow diagrams, sequence diagrams, and UML diagrams.
Excellent written and oral communication skills for interacting with both technical and non-technical staff.
Demonstrated strong analytical and problem-solving abilities.
Experience in Infrastructure as Code (IaC) using scripting and automation via AZ CLI, PowerShell, Bash, Bicep, or JSON templates (preferred).
Deep experience in building Kubernetes environments (preferred).
Prior experience securing Windows and Linux servers at scale (preferred).
Experience in multiple programming languages such as Python, C#, Java, JavaScript, or Ruby on Rails (preferred).
CCSK or similar technical security certification (preferred).