Cloud Security Engineer

Key Responsibilities

Cloud & Hybrid Security Architecture

● Design and Implement secure cloud architectures for hybrid environments (e.g.,

AWS/Azure/GCP + On-Premises) ensuring consistent security policies and controls

across all platforms.

● Develop and enforce security standards for Red Hat OpenShift Container Platform

(RHOCP) clusters, including the control plane, worker nodes, and network isolation.

● Configure and manage Identity and Access Management (IAM) solutions for cloud

providers and within RHOCP (e.g., RBAC, Service Accounts, integrating with enterprise

IDPs).

● Implement data protection strategies, including encryption for data at rest (storage) and

in transit (network), across the hybrid environment.

Container & DevSecOps Security

● Integrate security tools and processes into the CI/CD pipeline (DevSecOps) to

automate security testing, vulnerability scanning, and policy enforcement for container

images and application code.

● Manage container security by implementing and monitoring Security Context

Constraints (SCCs), image scanning, and runtime protection for pods and containers on

RHOCP.

● Oversee vulnerability management and patching strategies for the OpenShift platform

and the underlying host operating systems (e.g., RHEL).

Operations, Monitoring, and Response

● Implement and tune Cloud Security Posture Management (CSPM) and Cloud-Native

Application Protection Platform (CNAPP) tools to monitor security configuration and

compliance across the hybrid estate, including OpenShift.

● Monitor and analyze security logs, alerts, and events from RHOCP, cloud providers, and

security tools (SIEM/SOAR) to detect and respond to security incidents.

● Develop and refine incident response procedures specific to container and hybrid cloud

security breaches.

● Automate security tasks and remediation using scripting (e.g., Python, Bash) and

Infrastructure as Code (IaC) tools (e.g., Terraform, Ansible).

Governance and Compliance

● Ensure compliance with internal security policies and external regulations (e.g., GDPR,

PCI DSS, ISO by leveraging tools like the OpenShift Compliance Operator.

● Conduct regular security assessments, vulnerability scans, and penetration tests

against the hybrid cloud and RHOCP infrastructure.

● Provide security consultation and guidance to development, operations, and

architecture teams.

1. Required Technical Qualifications

● Experience: 8+ years in a dedicated cloud security role, with significant experience in a

hybrid cloud model.

● Platform Expertise: Deep hands-on experience securing Red Hat OpenShift

Container Platform (RHOCP) or Kubernetes in a production environment.

● Cloud Providers: Proficiency in the security services and best practices of at least one

major cloud provider (AWS, Azure, or GCP).

● Container Security: Expertise in container security principles, including image security,

runtime protection, secrets management (e.g., HashiCorp Vault, Kubernetes Secrets), and

networking (e.g., NetworkPolicies).

● Scripting & Automation: Strong proficiency in scripting languages (e.g., Python, Go,

Bash) and IaC tools (Terraform, Ansible).

● Linux Fundamentals: Advanced knowledge of Linux/RHEL operating systems security.

● Networking: Strong understanding of network security, segmentation, firewalls, and

VPNs in a cloud and container context.

1. Preferred Skills and Certifications

● Certifications:

○ Certified Kubernetes Security Specialist (CKS)

○ Certified Cloud Security Professional (CCSP)

○ AWS/Azure/GCP Security Certifications

○ Certified Information Systems Security Professional (CISSP)

● Experience with service meshes (e.g., Istio, Kiali) and their security implications.

● Familiarity with Red Hat Advanced Cluster Security (RHACS) or other CNAPP

solutions.

● Experience in Threat Modeling and risk analysis.

Job Types: Full-time, Permanent

Work Location: In person