Manager, Cloud Security Engineering

Workstreet

8d • Remote

About The Position

Workstreet is seeking a player-coach Manager, Cloud Security Engineering to lead a team of Cloud Security Engineers designing, building, and operating cloud security controls for clients across AWS, Azure, and GCP. The manager owns delivery quality, capacity, and consistency across the client portfolio, including hiring and developing engineers, staffing and overseeing engagements, setting engineering standards, and serving as the escalation point for technical and relationship issues. The role stays connected to hands-on work through architecture reviews, engineer support, and client conversations, while collaborating with GRC delivery teams to deliver outcomes that meet audit and security needs.

The manager works with client engineering leads and executives during U.S. Eastern Time business hours and is accountable for helping client environments achieve drift-resistant, code-defined security. This includes establishing reusable infrastructure-as-code baselines and cloud architecture patterns, directing native cloud security tooling, embedding security into delivery pipelines, translating regulatory frameworks into functional controls, overseeing incident response, and improving delivery through tooling and automation.

The role is remote-first, with a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time and occasional local travel for onsite meetings, team gatherings, or business activities. Candidates must be authorized to work in the U.S. without current or future visa sponsorship. Employment is contingent on identity verification and background screening where permitted by law.

Requirements

• Experience as a people manager who has hired, coached, and retained engineers and can maintain high work-quality standards while supporting the team under pressure.
• Deep, hands-on experience securing AWS, Azure, and GCP environments, including IAM strategy, network zoning, encryption, and logging.
• Experience with IAM approaches and technologies including RBAC, ABAC, permission boundaries, and federated identity via Okta or Entra ID.
• Fluency in Terraform and working knowledge of CloudFormation, Python, or Bash.
• Ability to review infrastructure-as-code module design, versioning, state management, and provider security controls.
• Ability to map technical cloud configurations to SOC 2, ISO 27001, GDPR, and HIPAA requirements and distinguish compliance mappings from functional technical controls.
• Ability to balance multiple client portfolios and competing priorities while maintaining rapid, well-governed remediation.
• Experience partnering with U.S.-based technology founders, DevOps leads, and executive teams, handling escalations, and leading architectural workshops.
• Excellent written and verbal English communication skills, including the ability to explain cloud risks to engineering and executive audiences.
• Ability to work a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time.
• Reliable high-speed internet and a professional home office suitable for confidential conversations and uninterrupted collaboration.
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities.
• Authorization to work in the U.S. without the need for visa sponsorship now or in the future.
• Participation in live video interviews with camera on and identity verification during recruitment and onboarding; successful identity verification and background screening where permitted by law.

Nice To Haves

• Active credentials such as AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.
• Experience building or scaling a security engineering team in a consulting, MSSP, or hyper-growth technology environment, including capacity planning and resourcing across client engagements.
• Hands-on experience building CMMC-compliant enclaves or FedRAMP security architectures and implementing NIST 800-53 and NIST 800-171 controls.
• Practical experience configuring and enforcing FIPS 140 standards across cloud services.
• Experience securing microservice architectures, Docker, and Kubernetes, including runtime security controls and vulnerability scanning.
• Direct experience with Zero Trust models, identity-centric security policies, network micro-segmentation, and context-aware access.
• Advanced use of logging platforms, SIEM, vulnerability management engines, and threat-hunting feeds.

Responsibilities

• Manage, coach, and develop Cloud Security Engineers through clear expectations, regular feedback, performance reviews, and career paths.
• Build the interview process, recruit and select engineers, and onboard them for ownership of client work.
• Plan capacity, assign engineers to client engagements, track milestones and quality, and keep concurrent engagements on schedule.
• Handle technical and relationship escalations and lead client conversations about scope, risk, and remediation priorities.
• Define and maintain reusable Terraform and CloudFormation baselines, landing-zone patterns, IAM and logging modules, and code-review practices.
• Review cloud architecture designs, including AWS multi-account structures, Azure Hub-Spoke and Landing Zone architectures, least-privilege IAM, network segmentation, and encryption.
• Set the approach for deploying and tuning cloud security tools, including AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud, and for SIEM logging pipelines.
• Establish pipeline guardrails and automated remediation workflows, including SAST, DAST, and secret scanning in GitHub Actions or Azure DevOps.
• Ensure technical controls meet applicable framework requirements in practice and that evidence supports audit readiness.
• Set cloud security incident escalation paths and ensure rapid containment, diagnostics, and post-incident improvements.
• Coordinate with GRC delivery teams and provide technical input on scoping, statements of work, and new client opportunities.
• Track delivery health, remediation cycle times, and module reuse, and invest in tooling and automation.
• Participate in architecture reviews, complex remediations, and client workshops to unblock engineers and maintain technical credibility.

Benefits

• Career development with mentorship and training opportunities.
• Reimbursement for successful completion of approved role-related training and certification courses.
• Competitive base salary, regular performance reviews linked to merit-based appraisals, and bonus opportunities.
• Significant room for career advancement at an early-stage company.
• Remote-first flexibility to work from anywhere while collaborating with a global team.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed