Senior Cloud Security Engineer

Acuity

. Lead security architecture reviews for Microsoft Azure applications, platforms, and services .

Posted 11/5/2026full-timeAtlanta • Georgia • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security architecture, particularly within Microsoft Azure, with a strong focus on implementing security controls, assessing identity and access management, and integrating security practices into CI/CD pipelines. Proficient in driving CNAPP capabilities and promoting secure-by-design principles across engineering and operations.

Highest-signal resume keywords

Cloud Security ArchitectureMicrosoft Azure SecurityKubernetes SecurityInfrastructure-as-Code (IaC)CI/CD Security Integration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityDevSecOpsIdentity and Access ManagementKubernetes Security ControlsTerraformMicrosoft Entra IDAPI SecuritySASTDASTPolicy-as-Code

Soft Skills

LeadershipCommunicationCollaboration

Tools & Technologies

Microsoft Defender for CloudPrisma CloudWizOrca SecurityLacework

Certifications & Qualifications

Microsoft Certified: Azure Security Engineer AssociateMicrosoft Certified: Cybersecurity Architect Expert

Industry Keywords

CSPMCWPPCIEMContainer SecurityVulnerability ManagementZero TrustSecure-by-DesignCloud Threat DetectionIncident ResponseGovernance Frameworks

Tech Stack

Tools & technologies

AzureCloudCyber SecurityKubernetesTerraform

About the role

Key responsibilities & impact

Lead security architecture reviews for Microsoft Azure applications, platforms, and services
Drive CNAPP capabilities across CSPM, CWPP, CIEM, Kubernetes, and container security
Assess identity and access architectures using Microsoft Entra ID and identity providers such as Okta
Review and strengthen service principals, managed identities, workload identities, privileged access, and identity entitlement controls
Evaluate AKS and Kubernetes security controls, including image hardening, admission and runtime controls, secrets handling, network segmentation, and workload protection
Review Infrastructure-as-Code implementations using Terraform, ARM, and Bicep
Assess service-to-service and API communication patterns, including authentication, authorization, encryption, secrets management, and trust boundaries
Partner with engineering squads to integrate automated security checks and risk-based deployment gates into CI/CD pipelines
Drive adoption of SAST, DAST, Software Composition Analysis, container image scanning, and IaC scanning
Implement and improve policy-as-code guardrails with risk-based enforcement and approved exception handling
Monitor cloud security findings and threat signals, support prioritization and remediation, and improve security posture
Contribute to cloud security standards, reference architectures, reusable controls, assessment templates, and engineering guidance
Document and communicate security findings, business impact, recommendations, and remediation plans
Promote secure-by-design and Zero Trust principles across engineering, architecture, operations, and product teams

Requirements

What you’ll need

5–8 years of experience in cloud security, product security, security architecture, DevSecOps, or related engineering roles
Proven experience leading secure architecture reviews and strengthening cloud security across infrastructure, workloads, identities, Kubernetes, application pipelines, APIs, and service-to-service communications
Strong hands-on experience with Microsoft Azure security capabilities and cloud-native security architecture
Experience with one or more leading CNAPP platforms, such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework
Practical experience across CSPM, CWPP, CIEM, Kubernetes security, container security, vulnerability management, and runtime protection for virtual machines, containers, and serverless workloads
Strong knowledge of Microsoft Entra ID and familiarity with identity providers such as Okta
Experience reviewing and securing AKS or Kubernetes environments, container images, registries, workloads, and runtime configurations
Hands-on experience reviewing Infrastructure as Code using Terraform, ARM, Bicep, or equivalent technologies
Experience securing APIs and service-to-service communication patterns, including identity, authorization, encryption, secrets, and network controls
Experience integrating security controls into CI/CD pipelines using automated testing, scanning, policy checks, deployment gates, and exception workflows
Working knowledge of SAST, DAST, Software Composition Analysis, container image scanning, IaC scanning, and policy-as-code
Preferred: experience developing cloud security standards, reusable control patterns, reference architectures, security assessment methods, or governance frameworks
Preferred: exposure to cloud threat detection, vulnerability prioritization, incident response, or continuous cloud security posture improvement
Preferred: relevant Azure or security certifications, such as Microsoft Certified: Azure Security Engineer Associate or Microsoft Certified: Cybersecurity Architect Expert

Benefits

Comp & perks

Equal opportunity employer
Reasonable accommodation in the application process for persons with disabilities
Americans with Disabilities Act (ADA) and other applicable-law protections