[Remote] Senior Cloud Security Engineer

Note: The job is a remote job and is open to candidates in USA. ShorePoint is a cybersecurity services firm focused on protecting high-profile, high-threat public and private sector customers. The company is seeking a Senior Cloud Security Engineer to design, implement, automate, and secure multi-cloud solutions across Microsoft Azure and AWS, with a focus on post-quantum cryptography readiness and enterprise cybersecurity. The role also manages identity governance, infrastructure as code, cryptographic controls, key management, vulnerability management, and continuous monitoring while collaborating with federal security and technology stakeholders.

Responsibilities

• Design, implement and secure cloud solutions in Azure and AWS in support of PQC readiness and enterprise cybersecurity capabilities
• Support PQC migration activities, lab provisioning and cloud-hosted enterprise services
• Develop and maintain standard operating procedures (SOPs) for both the AWS and Azure labs and their supporting cloud infrastructure
• Troubleshoot testing tools provisioned in AWS and Azure hosted environments, applying cloud platform knowledge to diagnose and resolve issues (tool SME expertise not required)
• Automate cloud deployments and security controls using Infrastructure as Code
• Implement and enforce cryptographic standards and controls across cloud environments
• Configure, manage and secure cloud-native key management services, including AWS Key Management Service (KMS) and Azure Key Vault
• Scale cloud environments as needs grow and support cryptographic agility, enabling algorithms and configurations to be updated or replaced with minimal disruption
• Manage identity governance and access controls within multi-cloud environments
• Perform vulnerability management and support continuous monitoring across Azure and AWS workloads
• Configure and manage virtual networks, subnets, firewalls, routing and Domain Name System (DNS)
• Manage virtual machines, storage, backup and disaster recovery and hybrid-cloud integrations
• Collaborate with Information System Officers (ISOs), Information System Security Officers (ISSOs), architects and Office of the Chief Information Officer (OCIO) stakeholders to ensure services are deployed securely and in alignment with federal mandates
• Promote consistent engineering practices and standards across the enterprise

Skills

• We are seeking a Senior Cloud Security Engineer to serve as a multi-cloud cybersecurity engineering subject matter expert across Microsoft Azure and Amazon Web Services (AWS)
• You bring a strong blend of cloud security engineering, identity governance, Infrastructure as Code, cryptographic enforcement and continuous monitoring experience
• Multi-cloud security engineering across Microsoft Azure and AWS
• Virtual networking concepts, including subnets, firewalls, routing and DNS
• Compute services in AWS (EC2, Lambda, ECS/EKS) and Azure (VMs, Functions, AKS)
• Storage, backup, disaster recovery and hybrid-cloud integration
• Identity governance and access management in cloud environments
• Infrastructure as Code (IaC) and security automation practices
• Cryptographic enforcement, crypto agility and PQC concepts
• Cloud-native key management, including AWS KMS and Azure Key Vault
• Vulnerability management and continuous monitoring
• Federal cybersecurity mandates and compliance requirements
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering or 4+ additional years of experience in lieu of the degree
• (ISC)2 Certified Information Security Professional (CISSP) or CISM
• 5+ years of experience performing the functions described above
• Active Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification
• Hands-on experience securing workloads in both Azure and AWS
• Hands-on experience with cloud-native key management services, including AWS KMS and Azure Key Vault
• Working knowledge of both AWS and Azure sufficient to troubleshoot third-party testing tools deployed in those environments
• Ability to work collaboratively with security, architecture and executive stakeholders
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking
• Applicants must be a U.S. citizen in compliance with federal contract requirements
• Azure Security Engineer or Azure Solutions Architect certification
• AWS Security Specialty or AWS Solutions Architect certification
• Familiarity with cryptographic agility practices in AWS and Azure environments
• Prior experience supporting a federal civilian agency IT program

Benefits

• 144 hours of PTO
• 11 holidays
• 85% of insurance premiums covered
• A 401(k)
• Continuing education
• Certification maintenance and reimbursement
• Remote work (Herndon, VA)

Company Overview