Cloud Security Operations Engineer

Cloud Security Operations Engineer

About the Role
We are seeking an experienced Cloud Security Operations Engineer to join our global Information Security team. This role will be instrumental in securing our cloud infrastructure, enhancing our cloud security posture, and driving security maturity across multiple business units. As a key contributor, you’ll work alongside DevOps, Infrastructure, and Compliance teams to embed security into every phase of our cloud and CI/CD operations. Key Responsibilities

• Cloud Security Operations: Lead and execute day-to-day cloud security operations across our global Azure environment, including threat monitoring, incident response, and configuration management.
• CI/CD Pipeline Security: Implement and manage security controls for CI/CD tools such as Jenkins, Ansible, and Terraform to ensure secure infrastructure-as-code and deployment practices.
• Cloud Security Posture Management (CSPM): Evaluate and improve our Azure cloud security posture through tooling, automation, and best practices.
• Security Maturity Development: Define and execute roadmaps to enhance the maturity of cloud security processes, tooling, and team capabilities.
• Governance, Risk, and Compliance: Design and implement cloud security controls aligned with industry standards (e.g., ISO 27001, NIST, CIS Benchmarks) to meet compliance and regulatory requirements.
• Infrastructure Security: Collaborate with DevOps and Infrastructure teams to integrate security across infrastructure components, ensuring secure deployment pipelines and operational resilience.
• Strategy & Architecture: Contribute to the development of a global cloud security strategy, including risk assessments, control frameworks, and secure-by-design practices.

Qualifications

• Experience: Minimum 7+ years of experience in cloud security operations, preferably in a large-scale, enterprise environment.
• Cloud Expertise: Deep hands-on experience with Microsoft Azure cloud security services, policies, and best practices.
• CI/CD & DevSecOps Tools: Proven experience securing CI/CD pipelines using tools like Ansible, Terraform, and Jenkins .
• Security Frameworks: Familiarity with security frameworks such as NIST, CIS, and ISO 27001.
• Automation & IaC: Strong understanding of Infrastructure-as-Code (IaC) and automation for cloud security controls.
• Soft Skills: Excellent communication and collaboration skills to influence cross-functional teams and business stakeholders.
• Certifications (Preferred): Azure Security Engineer Associate, CISSP, CCSP, or similar.

Andrew Gaeth
Sr. Unit Manager – Technology Services
LaSalle Network
#LI-JN1