Cloud Security Engineer

Acuity Inc.•Atlanta, GA

11d•$120,800 - $261,000

About The Position

Acuity Inc. is seeking a Cloud Security Engineer to join its product security team and help secure cloud applications and solutions within Microsoft Azure infrastructure. The role works closely with engineering teams to assess cloud architectures, monitor internal and external threats, and analyze potential vulnerabilities across internal and cloud environments. It focuses on cloud security, CNAPP, and modern DevSecOps practices to proactively reduce risk across infrastructure, workloads, and application pipelines. The position may be based anywhere in the United States and includes travel as part of its responsibilities. The role also involves documenting and communicating security findings and recommendations to technical and non-technical stakeholders, and developing strategic technical solutions informed by business direction, long-term vision, and risk.

Requirements

Strong expertise in cloud security, CNAPP, and modern DevSecOps practices.
Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework.
Experience assessing identity and access architectures using Microsoft Entra ID and other identity providers such as Okta.
Ability to guide engineering teams on secure authentication, federation, SSO, and least-privilege access for users and workloads, including Microsoft Entra service principals and Azure managed identities.
Experience reviewing security architecture and controls for AKS/Kubernetes environments, infrastructure-as-code such as Terraform, ARM, and Bicep, and service-to-service and API communication patterns.
Ability to communicate security assessment findings, recommendations, and remediation strategies clearly to technical and non-technical audiences.
Demonstrable ability to analyze business direction and problems, understand long-term vision and risk, and develop strategic technical solutions.

Nice To Haves

Basic familiarity with cloud security standards, reference architecture patterns, and reusable security controls; experience contributing to their development or maintenance is a plus.
Exposure to supporting cloud security posture improvements and helping development teams strengthen their security practices.
Foundational understanding of secure-by-design and Zero Trust principles; exposure to communicating related security recommendations across teams is a plus.
Azure Security Certifications are a plus.

Responsibilities

Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms.
Drive CNAPP capabilities, including CSPM, CWPP, CIEM, and Kubernetes and container security.
Assess identity and access architectures using Microsoft Entra ID and other identity providers, and guide engineering teams on secure authentication, federation, SSO, and least-privilege access for users and workloads.
Review architecture and security controls for AKS/Kubernetes environments, infrastructure-as-code, and service-to-service and API communication patterns.
Collaborate with engineering squads to integrate automated security checks and risk-based deployment gates into CI/CD pipelines.
Drive adoption of SAST, DAST, SCA, container image scanning, IaC scanning, and policy-as-code guardrails with risk-based enforcement and approved exception handling.
Document and communicate security assessment findings, recommendations, and remediation strategies to technical teams and non-technical business stakeholders.
Analyze business direction and problems, and develop strategic technical solutions aligned with long-term vision and risk.