Cloud Security Engineer

Cloud Security Engineer Cybersecurity Jobs

3 jobs found

Today

Director, Lead Cybersecurity Engineer

Morgan Stanley Alpharetta, GA

Alpharetta, GA

Today

$191k - $191k/yr Full time Manager Application Security Cloud Platforms

Apply Now

Job Description

Morgan Stanley is seeking a Director, Lead Cybersecurity Engineer in Alpharetta, GA to help build and operationalize cloud security controls. This role focuses on developing, testing, and deploying security capabilities using both native cloud features and third-party solutions, with an emphasis on automation, Infrastructure as Code, and ongoing monitoring for detective and preventive coverage.

Working onsite in Alpharetta, you will design cloud security services, create repeatable infrastructure patterns, and support compliance reporting through automated pipelines. The position also involves partnering with vendors, engineering teams, and resource owners to validate controls and remediate cloud configuration drift.

Responsibilities

Develop, test, and deploy cloud security controls using native cloud capabilities and third-party solutions.
Build and deliver high-quality software solutions with robust architecture and maintainability.
Create custom cloud security solutions and provide technical guidance.
Assess cloud security requirements and translate them into detective and preventive cloud controls across cloud service providers.
Develop automated pipelines for continuous deployment of cloud security policies, configuration baselines, monitoring rules, and compliance artifacts using CI/CD tools.
Design and implement Infrastructure as Code (IaC) templates to enable standardized and reproducible cloud security infrastructure.
Collaborate with vendors, engineering partners, and internal teams to design, deploy, and validate cloud security services.
Produce compliance and Cloud Configuration drift reports and maintain automated reporting pipelines.
Work with resource owners to investigate configuration drift, determine root causes, and coordinate remediation efforts.
Define priorities and coordinate with peer engineering and security teams to drive continuous improvement for cloud security tools, systems, and processes.
Integrate, configure, document, and deploy compliant cloud infrastructure services, including logging, monitoring, identity, encryption, and networking components.
Troubleshoot cloud security tooling issues, perform root cause analysis, and remediate defects.
Telecommuting permitted up to 2 days per week.

Requirements

Bachelor’s degree in Computer Engineering, Computer Science, or a related field.
Five (5) years of experience in the position offered, or five (5) years as a Security Engineer, Software Engineer, Technical Solution Consultant, Technology Analyst, or related role.
Five (5) years of experience building and implementing cloud security automation and tooling.
Five (5) years of experience with cloud service providers including Azure, AWS, or GCP.
Five (5) years of experience with the Shared Responsibility Model and security risks associated with cloud-hosted applications and data.
Five (5) years of experience designing and implementing product-level software or cloud security solutions.
Five (5) years of experience implementing security controls across the security assurance lifecycle, including detective and response controls.
Five (5) years of experience configuring native cloud security tooling and capabilities across major cloud service providers.
Five (5) years of experience with DevOps processes, workflows, and CI/CD automation.
Five (5) years of experience with GitHub Action.
Five (5) years of experience with Cloud Build.
Five (5) years of experience with Terraform.
Five (5) years of experience with CloudFormation.
Five (5) years of experience with Secure software development life cycle (SDLC) practices.
Five (5) years of experience with IaC tools including Terraform.
Five (5) years of experience with scripting languages including PowerShell, Python, or Bash.
Five (5) years of experience authoring and reviewing policy-as-code using OPA/REGO.
Five (5) years of experience creating technical architecture documentation.
Five (5) years of experience with IT Service Management processes.
Five (5) years of experience presenting complex technical concepts to non-technical stakeholders.

Technologies

Azure
AWS
GCP
GitHub Action
Cloud Build
Terraform
CloudFormation
PowerShell
Python
Bash
OPA/REGO
CI/CD
Infrastructure as Code (IaC)
Secure software development life cycle (SDLC)

Location: Alpharetta, GA (onsite). Salary: USD 191,000 per year.

View full job page →

Today

Palo Alto Networks Security Engineer

Cornerstone Concilium San Francisco, CA

San Francisco, CA

Today

$140k - $185k/yr Full time Cloud Security Engineer Engineer Firewall

Apply Now

Job Description

Cornerstone Concilium is hiring an expert Palo Alto Networks Security Engineer for a two-year, full-time consulting engagement at San Francisco International (SFO). This onsite role centers on modernizing the airport’s security posture as part of a Next-Generation Network program, including migration planning, monitoring setup, and hands-on enablement for airport staff.

In this position, you will lead the security workstream for a new Palo Alto Networks Next-Generation Firewall architecture, support cutovers when needed, and provide documentation and knowledge transfer so the airport team can operate the environment confidently.

Location: San Francisco, CA (onsite)
Compensation: $140,000 to $185,000 USD yearly
Experience: 3+ years

What you’ll do

Assess current and planned Palo Alto Networks architecture, NGFW configurations, and the Next-Generation Internet Edge design.
Review Panorama and firewall baselines, including interfaces, zones, routing, and high-availability (HA) design.
Evaluate security policies, security profiles, and Advanced Threat Prevention (ATP) settings.
Document findings with gap and risk analysis, and provide remediation recommendations.
Develop migration strategies, implementation plans, and test plans, including configuration cleanup and rule and policy migration to the new environment.
Configure firewalls, Panorama, security zones, segmentation, and HA, then validate failover behavior.
Execute functional, failover, performance, and connectivity testing; support cutovers, including after-hours work when needed.
Track risks, issues, and dependencies; assist with change management and submit weekly status reports.
Apply Palo Alto Networks best practices across policies, profiles, and threat prevention.
Set up dashboards, alerts, and weekly and monthly reports using native tools such as Panorama, Strata Cloud Manager, and Strata Logging Service, including historical trending and performance analysis.
Troubleshoot issues and open or escalate tickets with Palo Alto Networks.
Deliver as-built documentation and standard operating procedures (SOPs).
Lead knowledge-transfer sessions for airport staff.

What you bring

10+ years of expert-level Palo Alto Networks experience in large enterprises (campuses with 5+ locations and 20,000+ users). Coverage must include design, assessment, setup, migration, and ongoing support of NGFWs and Panorama, including HA deployments, firewalls with 10G+ throughput, and multi-zone environments with 1,000+ policies.
Hands-on experience with PA-7500, PA-5450, or PA-3000 series firewalls (or equivalent platforms).
10+ years of enterprise cybersecurity assessments, including firewall architecture and configuration review, policy review, threat-prevention checks, and gap, vulnerability, and risk analysis.
Large firewall migrations of at least 5 HA pairs (10 firewalls) in a single program, including config cleanup, policy translation, failover testing, end-to-end validation, and production cutovers, plus status reporting and change management support.
10+ years applying Palo Alto Networks best practices with monitoring, alerts, dashboards, reporting, and trend analysis using native Palo Alto Networks tools such as Panorama and its logging tools (not third-party tools).
10+ years writing technical documentation (as-builts, SOPs, troubleshooting guides) and training network and operations teams.
3+ years with advanced Palo Alto Networks services, including Advanced Threat Prevention, Prisma Access, Prisma Cloud, and related management and reporting tools.
Ability to pass an airport security background check and badging process.

Tools and platforms

Palo Alto Networks Next-Generation Firewall (NGFW)
Panorama
Advanced Threat Prevention (ATP)
Strata Cloud Manager
Strata Logging Service
Prisma Access
Prisma Cloud
Prisma SD-WAN

Preferred qualifications

Palo Alto Networks certifications, such as PCNSE.
Experience with Prisma SD-WAN, Prisma Access, and SASE deployments.
Experience with Strata Cloud Manager and Strata Logging Service.
Experience in airports, transportation, critical infrastructure, or the public sector.
Strong written and spoken communication.

About the program

The airport is modernizing its network as part of a Next-Generation Network program. The program includes a 400 Gbps backbone and a new Palo Alto Networks NGFW architecture that segments airline, concession, enterprise, and critical operations networks. You will lead the security side of assessment, migration, monitoring, and staff training, working closely with network, security, and project management teams.

View full job page →

Today