Cloud Engineer

CPI Card Group

. Engineer and operate security capabilities for multi-account AWS environments, including logging, configuration compliance, threat detection, vulnerability visibility, network protection, encryption, and data protection .

Posted 11/11/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in AWS infrastructure security, including the implementation of security controls, vulnerability management, and compliance with standards such as PCI DSS. Proficient in Infrastructure as Code using Terraform and automation through CI/CD practices.

Highest-signal resume keywords

AWS Infrastructure SecurityInfrastructure As Code (Terraform)CI/CD Platforms (GitLab CI/CD, Jenkins)Vulnerability ManagementPCI DSS Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud EngineeringDevOpsDevSecOpsScripting (Python, Bash, PowerShell)Automated TestingPolicy ValidationConfiguration ComplianceNetwork SecurityIncident ResponseRoot-Cause Analysis

Tools & Technologies

AWS CloudFormationAWS-native Delivery ServicesMonitoring PlatformsSecurity GroupsFirewall IntegrationDDoS-Resilient DesignsAutomated WorkflowsInfrastructure Telemetry

Certifications & Qualifications

AWS Certified Security – SpecialtyAWS Certified Solutions Architect – AssociateAWS Certified CloudOps Engineer – AssociateAWS Certified DevOps Engineer – ProfessionalAWS Certified Solutions Architect – ProfessionalAWS Certified AI Practitioner

Industry Keywords

CybersecurityInformation TechnologyRegulated EnvironmentsCompliance PracticesInfrastructure Protection

Tech Stack

Tools & technologies

AWSCloudCyber SecurityJenkinsPythonTerraform

About the role

Key responsibilities & impact

Engineer and operate security capabilities for multi-account AWS environments, including logging, configuration compliance, threat detection, vulnerability visibility, network protection, encryption, and data protection
Develop and maintain Terraform, AWS CloudFormation, scripts, modules, policies, and automated workflows for secure infrastructure provisioning and continuous security-control validation
Implement and improve secure infrastructure delivery pipelines with security testing, policy checks, approval controls, separation of duties, artifact integrity, and controlled promotion
Implement and maintain secure, scalable, and resilient infrastructure patterns across AWS and hybrid integrations
Automate identification, prioritization, tracking, and remediation of infrastructure vulnerabilities, insecure configurations, and control gaps
Integrate security controls across on-premises environments, AWS infrastructure, and relevant SaaS services
Support network segmentation, security groups, firewall integration, DDoS-resilient designs, secure connectivity, and infrastructure protection patterns
Improve infrastructure telemetry, alerting, and operational response through AWS and enterprise monitoring platforms
Participate in security and infrastructure incidents, root-cause analysis, containment, recovery, and corrective-action automation
Partner with Cybersecurity to implement PCI DSS and other applicable technical controls, validation methods, documentation, and audit evidence
Monitor infrastructure health, security posture, reliability, and control effectiveness
Participate in lifecycle management, change management, problem management, operational readiness, and the team’s 7x24 on-call rotation
Contribute to design reviews, technical documentation, and knowledge sharing
Evaluate AWS services and industry practices, pilot improvements within approved guardrails, and reduce manual work through automation

Requirements

What you’ll need

Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related discipline, or comparable professional experience
Three or more years of experience in cloud engineering, infrastructure engineering, DevOps, DevSecOps, cloud security engineering, or comparable technical roles
Hands-on experience deploying, securing, and operating AWS infrastructure in production or regulated hybrid environments
Experience implementing or improving security controls within production cloud or hybrid infrastructure
Proficiency with Infrastructure as Code, preferably Terraform, including reusable modules, automated testing, policy validation, and controlled deployment practices
Hands-on experience with CI/CD platforms and source control, such as GitLab CI/CD, Jenkins, GitHub Actions, or AWS-native delivery services
Strong scripting or software automation skills using Python, Bash, PowerShell, or a comparable language
Experience with multi-account AWS environments, identity and access controls, logging and monitoring, configuration compliance, vulnerability management, encryption, data protection, and network security
Experience participating in infrastructure or security incident response, root-cause analysis, and corrective-action implementation
Working knowledge of regulated-industry security and compliance practices
PCI DSS experience preferred
AWS certifications preferred; equivalent hands-on experience considered
Preferred certification paths include AWS Certified Security – Specialty and AWS Certified Solutions Architect – Associate or AWS Certified CloudOps Engineer – Associate
Additional desired qualifications include AWS Certified DevOps Engineer – Professional, AWS Certified Solutions Architect – Professional, and AWS Certified AI Practitioner or equivalent experience

Benefits

Comp & perks

7x24 on-call rotation
AWS certifications are preferred; equivalent hands-on experience will be considered