Cloud Security Engineer - Advanced

Zebra Technologies•Lincolnshire, IL

9d•Hybrid

About The Position

Coordinates with Cloud Engineering and other internal teams to design and implement security controls, defenses, and countermeasures that protect company data, applications, and infrastructure across public cloud and internet-facing environments. Serves as a senior technical resource for cloud security, with primary focus on secure cloud architecture, standardized perimeter controls, Zero Trust access patterns, design recommendations, risk articulation, and secure-by-design guidance across multi-cloud deployments.

Requirements

Bachelor’s degree in Information Security, Computer Science, Engineering, Information Systems, or equivalent experience.
5+ years of experience in information security, cloud engineering, cloud security architecture, network security, or infrastructure security.
Direct experience partnering with Cloud Engineering, Network, Identity, Security Operations, and application teams to assess risk and recommend secure design patterns.
Strong understanding of public cloud security concepts across AWS, Azure, GCP, and other cloud platforms.
Experience evaluating cloud architecture designs, identifying security gaps, articulating risk, and recommending practical controls that can be implemented by accountable engineering and operations teams.

Nice To Haves

Advanced degree preferred.
Cloud security, architecture, or engineering certifications such as CCSP, CISSP, AWS Security Specialty, Azure Security Engineer, Google Professional Cloud Security Engineer, or equivalent preferred.
Knowledge of Zero Trust, SASE, ZTNA, secure web gateway, DNS security, cloud firewall, WAF, IDS/IPS, segmentation, and private access patterns for users, workloads, APIs, and internet-facing applications.
Familiarity with CNAPP, CSPM, CWPP, CIEM, KSPM, cloud-native security services, infrastructure-as-code scanning, and policy-as-code approaches used to detect, prioritize, and reduce cloud exposure.
Working knowledge of secure SDLC, DevSecOps, CI/CD pipelines, Terraform or similar infrastructure-as-code tooling, container and Kubernetes security, API security, and secure configuration baselines.

Responsibilities

Partner with internal teams to incorporate security requirements into cloud architecture, modernization, application onboarding, access enablement, and vendor integration efforts.
Provide security architecture review and design recommendations for public cloud platforms, internet-facing applications, APIs, workloads, and data flows to improve control consistency and reduce unmanaged exposure.
Assess cloud designs against enterprise security standards, regulatory expectations, and industry frameworks; document architecture findings, risk decisions, exception rationale, and recommended remediation options.
Advise on standardized perimeter controls, Zero Trust access patterns, private access, segmentation, secure connectivity, and identity-based access approaches for users, workloads, applications, and third parties.
Review cloud configuration, IAM, network routing, encryption, logging, monitoring, and telemetry requirements; identify gaps and coordinate practical next steps with accountable technology owners.
Support adoption and consistent use of cloud-native and enterprise security capabilities, including CNAPP, CSPM, CWPP, CIEM, KSPM, WAF, IDS/IPS, secure web gateway, SASE, and ZTNA capabilities where applicable.
Articulate cloud security risk, business impact, control tradeoffs, and remediation priorities to technical teams, management stakeholders, and security leadership.
Maintain reusable cloud security guidance, decision records, control recommendations, status updates, escalation points, and next steps for cross-functional delivery teams.
Contribute to Security Architecture objectives by strengthening secure-by-design delivery, improving cloud control maturity, and enabling consistent architecture governance across cloud platforms.