Job Description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Manager, Cloud Security Engineering based in the United States.

The Manager, Cloud Security Engineering will lead and develop a team of cloud security specialists responsible for designing and implementing secure cloud environments across AWS, Azure, and GCP. This is a hands-on leadership opportunity combining technical expertise, people management, and strategic client delivery. You will oversee multiple client engagements, establish engineering standards, and ensure security solutions are scalable, automated, and aligned with industry compliance frameworks. Working closely with technical leaders, executives, and governance teams, you will translate complex security requirements into practical infrastructure solutions. You will also drive continuous improvement through automation, reusable infrastructure modules, and effective engineering practices. This remote-first role offers the opportunity to shape a growing security engineering practice in a fast-paced, highly collaborative environment.

Accountabilities

• Lead, mentor, and develop a team of Cloud Security Engineers through regular coaching, performance reviews, career development plans, and clear technical expectations.
• Manage recruitment, selection, onboarding, and workforce planning to build a high-performing engineering team.
• Oversee delivery across multiple client engagements, including resource allocation, capacity planning, project milestones, technical quality, and delivery timelines.
• Act as the primary escalation point for technical challenges and client relationship matters, leading discussions with engineering leaders and executives.
• Establish and maintain engineering standards, reusable Terraform and CloudFormation modules, secure cloud landing zones, IAM configurations, and infrastructure-as-code practices.
• Guide cloud architecture decisions across AWS, Azure, and GCP, ensuring secure configurations covering identity management, network segmentation, encryption, monitoring, and logging.
• Oversee the implementation and optimization of native cloud security solutions, including AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud.
• Integrate security into development and deployment pipelines by implementing automated guardrails, remediation workflows, vulnerability scanning, and secret detection.
• Ensure technical cloud controls effectively address regulatory and security frameworks, including SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.
• Lead cloud security incident response processes, ensuring rapid containment, investigation, remediation, and continuous improvement.
• Collaborate with Governance, Risk, and Compliance (GRC) teams to align technical implementations with audit requirements, client objectives, project scopes, and new business opportunities.
• Monitor engineering delivery performance, remediation timelines, and infrastructure module reuse while identifying opportunities to improve automation and operational efficiency.
• Remain hands-on when needed by participating in architecture reviews, complex remediation projects, and client technical workshops.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1