Cloud Security Engineer

San R&D Business Solutions LLC • New York, NY

1d • Hybrid

About The Position

We are seeking a Cloud Security Engineer who drives the technical design and full-lifecycle integration of comprehensive security control frameworks. By leveraging a deep, architectural understanding of foundational risk models (e.g., NIST SP 800-53, CSF, ISO 27001), this architect translates rigorous compliance mandates into resilient, scalable cloud infrastructure. The holistic approach to boundary definition, automated enforcement, and zero-trust principles ensures that security is engineered organically into the environment, continuously satisfying complex third-party assessment criteria.

Requirements

• Exp with FedRAMP & Azure/AWS
• Full-Lifecycle Engineering: Demonstrated experience in the end-to-end integration of rigorous control frameworks (e.g., NIST 800-53, ISO 27001, SOC 2, CMMC)-from initial gap analysis and architectural design through deployment, automated enforcement, and continuous monitoring.
• Control Translation: Proven ability to dissect complex regulatory catalogs and translate them into actionable, technical engineering requirements for AWS infrastructure and DevSecOps pipelines.
• Boundary & Scoping Expertise: Expertise in defining complex authorization boundaries, architecting secure enclaves, and implementing micro segmentation to isolate regulated data and reduce the overall audit footprint.
• Compensating Controls: Adept at designing and documenting robust compensating controls and operational workarounds when native technical enforcement of a framework requirement is unfeasible.
• Ability to work with multiple teams and drive controls into production

Responsibilities

• Implement and enforce FedRAMP controls in cloud platforms
• Review existing security frameworks and close gaps between standards and implementation
• Deploy and validate security policies and rule sets
• Work with data protection and cryptography teams to enforce cloud security controls
• Ensure security controls are effective, auditable, and operational
• Identify issues like overprovisioning and underutilization from a security and governance perspective

What This Job Offers

• Career Level: Senior
• Education Level: No Education Listed