Senior Cloud Security Engineer

PowerPlan, Inc • Atlanta, GA

3d • Hybrid

About The Position

This role offers a rare chance to build cloud security and IAM maturity programs from the ground up rather than caretake an existing one, with the Senior Cloud Security Engineer owning compliance, identity strategy, and security automation across both AWS and Azure as a senior individual contributor. Success here means shaping the roadmap leadership acts on, not just executing someone else's plan, with visible influence across Cloud Engineering, Information Security, and executive stakeholders within the first 90 days. Our company operates cloud infrastructure across AWS and Azure at a scale where security and identity management directly affect how fast the business can move. We invest in strong technical foundations, infrastructure as code, automated compliance, and mature access governance, because we would rather build guardrails once than firefight forever. This role sits at the center of that investment, partnering closely with Cloud Operations and Engineering to keep security built in rather than bolted on.

Requirements

• 8+ years of experience in cloud security, infrastructure security, or security engineering, with deep hands-on experience across both AWS and Azure.
• Demonstrated experience implementing security frameworks such as CIS, NIST, or SOC 2 at scale, including running assessments and driving remediation to closure.
• Strong IAM design and implementation background, including federation (SAML, OIDC), RBAC, ABAC, and privileged access management.
• Proficiency in Python and PowerShell for security automation, and hands-on experience writing Terraform modules that enforce controls as code.
• A track record of translating security requirements into infrastructure-as-code guardrails integrated into CI/CD pipelines.
• Experience building or maturing a risk-based or IAM program from an early or fragmented state.
• Excellent written and verbal communication skills, comfortable presenting security strategy to both engineers and executive leadership.
• Experience leading incident response for security events and driving post-incident corrective action.

Responsibilities

• Complete an assessment of current security framework compliance across AWS and Azure in the first 30 days, deliver a prioritized remediation roadmap by day 90, and keep compliance scores improving through the first 6 months and beyond.
• Map the current state of IAM across AWS, Azure, and integrated tooling in the first 30 days, present a phased IAM maturity roadmap to leadership by day 90, and deliver Phase 1 (least-privilege enforcement, access reviews in place) within the first 6 months.
• Turn security framework requirements and IAM controls into enforced, production-grade code, Terraform modules and Python/PowerShell automation, so compliance and access control are checked and enforced automatically rather than tracked in manual checklists.
• Serve as the security subject matter expert in cloud architecture reviews and change advisory processes, and mentor Cloud Operations and Engineering teams on security best practices, so security judgment shapes decisions before they ship rather than gatekeeping after the fact.
• Lead incident response for cloud security events end-to-end, from detection through resolution, and drive the post-incident review process to convert findings into concrete follow-up actions.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed