Senior Cloud Security Engineer
The Guardian Life Insurance Company of America4 days ago
Base Salary
$119k - $195k/yr
Responsibilities
- Implement and continuously improve AWS security capabilities for identity, cryptography, PKI, cloud security posture, and cloud-native application protection.
- Design and operate AWS IAM policies, Service Control Policies, cross-account access models, least-privilege controls, and identity governance patterns.
- Implement continuous monitoring, threat detection, vulnerability management, workload protection, and automated remediation across the application lifecycle.
- Integrate AWS security capabilities with CNAPP and CSPM platforms and operationalize controls from code through runtime.
- Manage AWS KMS, ACM, encryption controls, certificate management, and enterprise PKI integrations.
- Assess cloud security posture and runtime risks, identify control gaps, and drive improvements across identities, workloads, containers, encryption, and networks.
- Partner with architecture, DevOps, cloud engineering, application, compliance, and business teams to translate requirements into technical designs and security guardrails.
- Develop security automation and integrate controls into Infrastructure as Code and CI/CD processes.
- Produce security analysis, reporting, documentation, presentations, operational runbooks, governance processes, and audit-ready materials.
- Stay current on AWS security capabilities, CNAPP technologies, cloud-native threats, cryptographic technologies, and industry practices.
Requirements
- At least 5 years of experience in IT, cybersecurity, cloud engineering, or related disciplines.
- At least 5 years of hands-on AWS security experience, including IAM, PKI, CSPM, and CNAPP capabilities.
- Hands-on experience with IAM Identity Center, least-privilege policies, Service Control Policies, cross-account access, and RBAC/ABAC models.
- Experience deploying and managing AWS KMS, AWS Certificate Manager, and enterprise PKI capabilities.
- Experience implementing or operating CNAPP and CSPM platforms such as Wiz, Prisma Cloud, and AWS Security Hub.
- Strong understanding of zero trust, encryption at rest and in transit, workload and container security, identity boundaries, and network security.
- Experience with Infrastructure as Code and security automation using Terraform, CloudFormation, and security integration into development pipelines.
- Experience with NIST, CIS, SOC 2, SOX, NYDFS, Model Audit Rule, and the AWS Well-Architected Framework Security Pillar.
- A bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience is preferred.
- Experience with security technology evaluations, RFP/RFI processes, vendor assessments, and proofs of concept is preferred.
- Relevant certifications such as AWS Certified Security - Specialty, CISSP, or CCSP are preferred.
Benefits
- Hybrid work arrangement requiring 3 days per week in the office in Holmdel, NJ; New York, NY; or Bethlehem, PA.
- Full-time eligible employees receive contemporary, supportive, flexible, and inclusive benefits and resources.
- Professional development opportunities include skill-building, leadership development, and philanthropic opportunities.
- The role may be eligible for annual, sales, or other incentive compensation in addition to base salary.
About The Guardian Life Insurance Company of America
The Guardian Life Insurance Company of America is a U.S. mutual insurer that provides life and disability insurance, dental and vision plans, annuities, and workplace benefits to individuals, families, and employers. It earns revenue through premiums, investment income, and fee-based wealth and retirement solutions, distributed via financial professionals, employers, and digital channels. Founded in 1860 and headquartered in New York City, it operates nationwide and is owned by its policyholders.