Senior Cloud Security Engineer

Guardian Life Insurance • Holmdel Township, NJ

6d • $118,980 - $195,465 • Hybrid

About The Position

Guardian is seeking a Senior Cloud Security Engineer to implement and continuously improve security capabilities across its expanding AWS environment. This senior technical contributor will work across cloud-native application protection (CNAPP), cloud security posture management (CSPM), AWS-native identity security, public key infrastructure (PKI), and other cloud security controls in a complex, highly regulated environment. The role translates security and architecture requirements into scalable engineering solutions, strengthens controls from code through runtime, and helps teams identify and address cloud security risk.

The engineer will partner with Cloud Engineering, DevOps, Architecture, Cybersecurity, Compliance, infrastructure, business stakeholders, and application teams to automate security controls, conduct advanced threat and security analysis, improve cloud security posture, and enable secure adoption of AWS services. The position is hybrid, with three days per week in the office, based in Holmdel, New Jersey; New York, New York; or Bethlehem, Pennsylvania. The role reports to the Head of Security Platforms.

Requirements

• At least 5 years of experience in IT, cybersecurity, cloud engineering, or related disciplines.
• At least 5 years of hands-on AWS security experience, including knowledge of IAM, PKI, CSPM, and CNAPP capabilities.
• Hands-on experience designing and implementing AWS identity controls, including IAM Identity Center, least-privilege policies, Service Control Policies, cross-account access, and RBAC/ABAC models.
• Experience deploying and managing AWS Key Management Service (KMS), AWS Certificate Manager (ACM), and enterprise PKI capabilities.
• Experience implementing or operating CNAPP and CSPM platforms for posture management, workload protection, risk prioritization, and remediation.
• Strong understanding of cloud security principles, including zero trust, encryption at rest and in transit, workload and container security, identity boundaries, and network security.
• Experience with Infrastructure as Code and security automation using technologies such as Terraform, CloudFormation, CI/CD pipelines, and shift-left security practices.
• Experience with security and compliance frameworks such as NIST, CIS, SOC 2, SOX, NYDFS, and Model Audit Rule (MAR), and the AWS Well-Architected Framework Security Pillar.
• Strong communication skills to explain technical risks and solutions to technical and non-technical stakeholders.
• Ability to assess cloud security risks, identify gaps, and drive technical improvements from design through runtime.
• Ability to work across cloud engineering, cybersecurity, architecture, DevOps, and application teams, balancing priorities in a complex environment.

Nice To Haves

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
• Experience supporting security technology evaluations, including RFP/RFI processes, vendor assessments, and proofs of concept.
• Relevant certifications such as AWS Certified Security - Specialty, CISSP, or CCSP.

Responsibilities

• Implement and continuously improve AWS security capabilities across identity, cryptography and PKI, cloud security posture, and cloud-native application protection.
• Engineer scalable AWS access controls, including IAM policies, Service Control Policies, cross-account access models, and least-privilege patterns.
• Implement and enhance cloud security controls for continuous monitoring, threat detection, vulnerability management, workload protection, and automated remediation across the application lifecycle.
• Integrate AWS security capabilities with enterprise CNAPP and CSPM platforms and operationalize security controls from code through runtime.
• Manage and enhance cloud cryptographic capabilities, including AWS KMS, ACM, encryption controls, certificate management, and enterprise PKI integrations.
• Assess AWS security, identify control gaps and emerging risks, and drive improvements across identity, encryption, workloads, containers, and other cloud security domains.
• Partner with Cloud Architecture, DevOps, application teams, and business stakeholders to gather requirements and translate them into technical designs, reusable security patterns, and guardrails.
• Develop automation and integrate security controls into Infrastructure as Code and CI/CD processes to identify and remediate risk earlier in the development lifecycle.
• Analyze cloud security posture and runtime risks and develop reporting, documentation, and presentations for technical and business stakeholders.
• Establish and support cloud governance and control processes aligned with enterprise security, regulatory, and audit requirements.
• Develop engineering documentation and operational runbooks to improve consistency, scalability, and audit readiness.
• Collaborate across Cybersecurity, Architecture, Cloud Engineering, Infrastructure, Compliance, and application teams to align cloud security capabilities with enterprise strategy.
• Stay current on AWS security capabilities, CNAPP technologies, cloud-native threats, cryptographic technologies, and industry best practices, applying that knowledge to strengthen Guardian's cloud security posture.

Benefits

• The role may be eligible for annual, sales, or other incentive compensation in addition to salary.
• Guardian describes benefits and resources as supportive, flexible, and inclusive; benefits apply to full-time eligible employees.
• Skill-building, leadership development, and philanthropic opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed