Senior Cloud Security Engineer

About the role

Greystar is seeking a hands‑on Senior Cloud Security Engineer to define and enforce security standards across its global cloud estate. You will work directly with platform, development, and security teams to embed security into architecture, pipelines, and operations.

Key responsibilities

• Define and own cloud security architecture patterns, including IAM guardrails, network segmentation, encryption, and secrets management.
• Implement policy‑as‑code, custom Azure policies, and governance across Azure and AWS environments.
• Integrate security tooling into CI/CD pipelines (IaC scanning, container image scanning, SAST/DAST, secrets detection) and remediate findings.
• Establish least‑privilege RBAC, just‑in‑time access, and recurring access reviews for cloud resources.
• Partner with Cybersecurity Operations to tune Defender for Cloud, Sentinel analytics, and develop cloud‑specific runbooks.
• Map cloud controls to compliance frameworks (SOC 2, PCI, CIS) and maintain security documentation.

Required profile

• Bachelor’s degree in Computer Science, Information Security, or equivalent experience.
• 8+ years of cloud security or security architecture experience, with senior‑level responsibility.
• Deep hands‑on expertise securing Azure environments and solid knowledge of AWS security services.
• Proven ability to embed security into Infrastructure as Code and CI/CD pipelines.

Required skills

• Azure (Policy, Defender for Cloud, Sentinel, network security groups, private endpoints)
• AWS (IAM, Security Hub, GuardDuty, Config)
• Infrastructure as Code: Terraform, ARM, Bicep
• CI/CD security: SAST, DAST, container image scanning, dependency scanning, secrets detection
• Cloud identity: Entra ID, RBAC, just‑in‑time access, workload identity federation
• Scripting/automation: PowerShell, Python, Bash
• Knowledge of Databricks, AKS/Kubernetes security is a plus