Cloud Security Engineer

Guides cloud security engineering on AWS, GCP, and Azure—org guardrails (SCPs, org policies), cloud IAM and federation, network segmentation and private connectivity, encryption and KMS, logging and audit to SIEM, CSPM and native detective controls (Config, Security Hub, GuardDuty, SCC, Defender), workload hardening, and secure cloud architecture review with remediation. Use when implementing or auditing cloud security controls, fixing misconfigurations, designing multi-account guardrails, hardening VPC/VNet and data plane access, or integrating cloud audit logs—not for corporate IdP/SIEM/EDR programs broadly (information-security-engineer), CI pipeline gates and SBOM onl…