Cloud Security Engineer

About CloudIQ Technologies

Cloud IQ offers a portfolio of IT Cloud Management services designed to ensure high availability, scalability, optimal uptime, and reduced total cost of ownership. We provide end‑to‑end Cloud Infrastructure and Application Migration Services, helping global organizations optimize mission‑critical IT systems and business processes. Our expert teams enable customers to focus on core business functions while we manage their infrastructure with precision and reliability.

CloudIQ is a full‑stack engineering solutions provider with deep expertise in Application Modernization and modern data analytics platforms across Azure, AWS, and Kubernetes. Recognized as one of the top 100 companies and certified by both the Cloud Native Computing Foundation and Microsoft, CloudIQ is committed to delivering cutting‑edge cloud‑native engineering solutions.

About the role

We are hiring a Cloud Security Engineer to replace manual security reviews with automated guardrails built directly into how our teams deliver infrastructure.

Our platform team is building reusable Infrastructure-as-Code, a developer self-service portal and a dev-to-prod promotion model on Azure. You will make sure security is built into each of these from the start, through policy-as-code, pipeline scanning and secure identity patterns, rather than checked after the fact.

You will work side by side with the platform engineers. The goal is simple: the secure way becomes the easy way.

What you'll do

• Assess and automate reviews. Assess current security review, approval and exception processes, and identify which can be automated or replaced by preventive controls.
• Implement policy-as-code. Define and implement guardrails enforced at the pipeline, IaC and Azure platform layers.
• Secure the pipelines. Build security scanning and compliance checks into infrastructure and application pipelines, including IaC scanning, secrets detection and container image scanning.
• Set the gates. Define the security requirements and approval gates for the infrastructure promotion model and the self-service portal.
• Design identity and access. Create identity and access patterns for self-service provisioning, including RBAC, managed identities and least-privilege service principals.
• Ship security as code. Partner with platform engineers so security standards ship as reusable modules and templates, not after-the-fact reviews.
• Document standards. Write security standards, control mappings and exception workflows that teams can follow and auditors can trace.

What you bring

• 5+ years in cloud security or DevSecOps, with strong hands-on Azure security experience.
• Azure identity and access management: Entra ID, RBAC, PIM, managed identities and Key Vault.
• Policy-as-code using Azure Policy plus at least one of OPA/Gatekeeper, Checkov, tfsec or Sentinel.
• Pipeline security integration for SAST, IaC scanning, secrets scanning and container image scanning, using tools such as Defender for DevOps, Trivy or Snyk.
• Microsoft Defender for Cloud and cloud security posture management.
• Kubernetes and AKS security fundamentals: network policies, pod security and admission control.
• Enough Terraform and pipeline fluency to work directly in the platform team's codebase.
• Scripting in PowerShell or Python for security automation.

Nice to have

• Experience mapping controls to frameworks such as CIS Azure Benchmark, NIST 800-53, SOC 2 or ISO 27001.
• GitHub Advanced Security or Azure DevOps security tooling in production.
• Experience securing internal developer portals such as Backstage or Port.
• Certifications such as AZ-500 (Azure Security Engineer), SC-100, CKS or CCSP.

Why join

You will define how security works on a platform that is being built now, so your controls become the default for every team rather than a gate they work around.

In your first months, success looks like:

• Current review, approval and exception processes mapped, with the first manual reviews replaced by automated controls.
• Policy-as-code guardrails enforced in pipelines and on the Azure platform.
• IaC, secrets and image scanning running in every infrastructure and application pipeline.
• Clear security gates defined for the promotion model and the self-service portal.
• Documented standards, control mappings and an exception workflow teams can follow.