Cloud Security Engineer

TherapyNotes, LLC

. Manage and secure Azure-focused cloud infrastructure and cloud-based applications .

Posted 10/7/2026full-timeRemote • Pennsylvania • United StatesMid-LevelSenior💰 $110,000 - $150,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing and securing Azure-focused cloud infrastructure and applications, with a strong emphasis on container security, cloud security posture management, and incident response. Proficient in implementing Zero Trust principles and conducting security assessments across various frameworks.

Highest-signal resume keywords

Azure Cloud SecurityKubernetes SecurityCloud Security Posture Management (CSPM)Terraform/OpenTofu Infrastructure-as-CodeMicrosoft Entra ID Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Security EngineeringNetwork SecurityVulnerability ManagementIncident ResponseSecurity AssessmentsContainer SecurityIaC SecurityThreat AnalysisScripting/ProgrammingZero Trust Security

Tools & Technologies

SIEMDLPE/XDRCloudflare Zero TrustWAFGitOpsArgoFlux

Certifications & Qualifications

CISSPSSCPSecurity+Azure Cloud Security CertificationAWS Cloud Security Certification

Industry Keywords

NISTISO 27001CISHITRUSTPCI DSS

Tech Stack

Tools & technologies

AWSAzureCloudFluxKubernetesLinuxSDLCTerraform

About the role

Key responsibilities & impact

Manage and secure Azure-focused cloud infrastructure and cloud-based applications
Secure containerized workloads and Kubernetes environments, including network policy, workload identity, runtime protection, and container image scanning
Own and mature CSPM by identifying and remediating cloud misconfigurations
Secure Terraform/OpenTofu infrastructure-as-code pipelines through access control, secrets management, and deployment approval workflows
Manage Microsoft Entra ID using Conditional Access, Entitlement Management, and JIT privileged access models
Review network diagrams and connectivity changes; advise on segmentation and sensitive data flows with IT and SRE teams
Administer Zero Trust network access and edge security tooling
Manage SIEM, DLP, E/XDR, and vulnerability management solutions
Monitor alerts, respond to and escalate incidents, and participate in the incident response on-call rotation
Conduct threat analysis, vulnerability assessments, and risk evaluations; document findings, manage mitigation, and report status to leadership
Develop queries, scripts, integrations, and automated workflows to improve cloud security operations
Collaborate with development teams to integrate security into the SDLC and CI/CD pipeline
Conduct periodic cloud configuration and access reviews for compliance
Participate in audits and assessments supporting GRC efforts

Requirements

What you’ll need

Bachelor's degree in information security, computer science, or related field preferred; equivalent experience considered
5+ years of experience in cloud security engineering or related role
Deep, hands-on experience securing cloud infrastructure and cloud-based applications; Azure preferred, AWS a plus
Hands-on network security experience and strong understanding of network architecture, connectivity, segmentation, and firewall controls
Experience securing containerized workloads and Kubernetes environments, including network policy, workload identity, and runtime protection
Experience with cloud security posture management (CSPM) and remediating misconfigurations across cloud environments
Experience securing IaC orchestration platforms, including access control, secrets management, and deployment approval workflows; Terraform or OpenTofu
Experience with Microsoft Entra ID, including Conditional Access, Entitlement Management, and just-in-time (JIT) privileged access models
Experience with Zero Trust / SASE tooling, such as Cloudflare Zero Trust, WAF, and Gateway
Knowledge of NIST, ISO 27001, CIS, HITRUST, and PCI DSS frameworks
Proven ability to conduct security assessments, vulnerability management, and incident response
Strong understanding of Windows, Linux, and endpoint security
Industry certifications such as CISSP, SSCP, Security+, or Azure/AWS cloud security certification preferred
Familiarity with GitOps tooling such as Argo and Flux for secure Kubernetes deployment
Familiarity with programming/scripting languages a plus

Benefits

Comp & perks

Employer sponsored health, dental, vision, life, and disability insurance
Retirement plan with company contribution
Annual company profit sharing
Personal development/training budget
Open, collaborative work environment
Extensive 2-week onboarding plan
Comprehensive mentorship program