Senior Cloud Security Engineer

Wintrust Financial Corporation•Rosemont, IL

2d•$117,000 - $158,000•Hybrid

About The Position

The Senior Cloud Security Engineer is responsible for designing, implementing, and continuously improving the organization’s cloud security posture across multi-cloud and hybrid environments. This role serves as a technical subject-matter leader in securing cloud platforms, enabling business innovation while managing risk, and ensuring alignment with enterprise security strategy and regulatory requirements.

Requirements

Bachelor’s degree or equivalent (preferred in Data Science, Computer Science, or AI)
5-7 years of relevant experience
Designed and implemented secure Azure and hybrid cloud architectures, incorporating Microsoft Entra ID (Azure AD), Conditional Access, network segmentation (VNets, Private Endpoints), and Defender for Cloud to reduce misconfiguration risk and enforce least privilege access
Led cloud security engineering and automation initiatives, integrating Terraform/ARM into CICD pipelines, enhancing threat detection using Microsoft Sentinel, and reducing cloud exposure by remediating vulnerabilities based on risk prioritization (e.g., KEV/EPPS-driven approach)

Nice To Haves

Cybersecurity and/or Artificial Intelligence related certifications preferred

Responsibilities

Implement and enforce Azure-native and multi-cloud security controls, including Microsoft Entra ID (Azure AD), RBAC, network segmentation (VNets, NSGs, Private Endpoints), encryption, and Defender for Cloud/CNAPP capabilities.
Help drive threat detection and incident response for Azure and cloud platforms, leveraging necessary tooling and cloud telemetry to ensure rapid detection, containment, and reduced MTTD/MTTR.
Embed security into DevOps and infrastructure-as-code pipelines, securing Azure resources (ARM/Bicep, Terraform) and automating policy enforcement and remediation.
Partner with engineering teams to enable secure cloud adoption, balancing innovation and speed with effective security controls and measurable risk reduction across Azure and hybrid platforms.
Ensure strong identity and access governance in Azure, enforcing MFA, Conditional Access, least privilege, and eliminating over-privileged or orphaned accounts.
Partner with technology engineering teams to enable secure cloud adoption, balancing innovation and speed with effective security controls and measurable risk reduction across Azure and hybrid platforms.
Help develop cloud risk posture and compliance outcomes, reducing misconfigurations, managing vulnerabilities and exposure, and aligning regulatory requirements using KPIs/KRIs.