Job Description

The Senior Cloud Administrator owns the day-to-day administration and hardening of security controls across our cloud infrastructure and SaaS ecosystem. This role runs CSPM/SSPM tooling, manages IAM/SSO/MFA programs, and drives remediation directly, working closely with IT and business teams. The ideal candidate has deep hands-on experience operating these tools and programs themselves — not directing others to do so — and can exercise sound judgment on day-to-day security issues with minimal oversight.

Typical Duties and Responsibilities

Cloud Security

• Administer and harden cloud security controls across AWS, Azure, and/or GCP
• Maintain cloud security standards and reference documentation
• Review cloud deployment configurations for adherence to security baselines and flag deviations
• Run and administer Cloud Security Posture Management (CSPM) tools — configure policies, tune detections, triage findings, and drive misconfigurations to resolution
• Maintain control mappings against applicable compliance frameworks (CIS, NIST, SOC 2, ISO 27001, etc.)

SaaS Security

• Maintain SaaS security configuration standards
• Run and administer SaaS Security Posture Management (SSPM) tools — configure policies, monitor for drift, and remediate findings directly
• Own IAM administration for SaaS platforms — configure and manage SSO, MFA, and provisioning/deprovisioning workflows end-to-end
• Review SaaS integrations and third-party connections against security guidelines and remediate gaps

Secure Configuration, Governance and Compliance

• Conduct cloud and SaaS security assessments and configuration audits; execute remediation directly
• Monitor cloud infrastructure and SaaS platforms for suspicious activity, risky configuration changes, unauthorized access, and abnormal behavior
• Maintain detections, alerts, and incident response workflows
• Investigate cloud and SaaS security incidents; perform root-cause analysis and implement fixes to prevent recurrence
• Identify, track, and prioritize vulnerabilities, misconfigurations, and audit/pen-test findings
• Work directly with IT and business stakeholders to execute mitigation and remediation plans
• Mentor junior administrators on tooling and remediation practices
• Perform other duties as assigned or needed

Required Education/Experience/Skills

• Bachelor's degree in a technology-related discipline, or demonstrated equivalent experience
• 3-6+ years of hands-on experience in Cloud Security, Cyber Security, IAM Administration, or Cloud Engineering
• Direct, hands-on experience configuring and running CSPM and/or SSPM tools (not just consuming reports)
• Direct, hands-on experience managing IAM/SSO/MFA — configuration, provisioning/deprovisioning, and troubleshooting
• Working knowledge of information security tools and concepts across Endpoint Security, Identity Management, or related domains
• Proficiency in at least one of the following (or similar): Cloud/SaaS Security, SIEM, EDR, Web Security, Firewall, Email Security, NDR, Password Management, Privileged Access Management, PCI Compliance, GRC, Vulnerability Management, BCP, DR
• Strong analytical and troubleshooting skills with attention to detail; able to exercise judgment on ambiguous issues with minimal oversight
• Ability to participate in an on-call rotation to troubleshoot and respond to security incidents
• Track record of implementing and managing security tools/controls for servers, endpoints, cloud, or network systems
• Good communication skills for working directly with IT and business stakeholders on remediation

Preferred Qualifications

• Retail experience
• Cloud security certifications (e.g., AWS/Azure/GCP security certs)
• Security+
• Progress toward CISSP or similar