What are the responsibilities and job description for the Cloud Engineer position at Calance?
Cloud Security Engineer
Location: Bolingbrook, IL (Hybrid)
Employment Type: Full-Time, Permanent
Base Salary: $130,000 per year 12.5% bonus eligibility
Job Summary
We are seeking a hands-on Cloud Security Engineer to secure cloud infrastructure and modern application environments, primarily on Google Cloud Platform (GCP), with some Azure exposure. This role focuses on implementing cloud security controls, managing IAM, monitoring security threats, supporting compliance, and integrating security into DevSecOps and CI/CD pipelines.
The ideal candidate has strong technical expertise in GCP security, cloud workload protection, identity management, vulnerability remediation, and cloud security automation.
Key Responsibilities
- Implement and maintain security controls across GCP and Azure environments.
- Manage cloud IAM, least-privilege access, privileged identities, service accounts, and identity federation.
- Secure cloud services, including GKE, Cloud Storage, BigQuery, Cloud SQL, Pub/Sub, Cloud Run, and Cloud Functions.
- Implement cloud security guardrails, configuration hardening, encryption, and key management.
- Integrate vulnerability scanning, secrets detection, and policy validation into CI/CD pipelines.
- Support container and Kubernetes security, including image scanning and secure deployment practices.
- Monitor and investigate cloud security alerts, misconfigurations, vulnerabilities, and potential incidents.
- Conduct root cause analysis and coordinate remediation activities.
- Support cloud security assessments, audits, and compliance requirements aligned with CIS, NIST 800-53, and PCI-DSS.
- Use scripting, Infrastructure as Code (IaC), and automation to improve security operations.
- Collaborate with infrastructure, platform, application development, and security teams to promote secure cloud adoption.
Required Qualifications
- 3 years of experience in cloud security, cybersecurity, cloud engineering, DevSecOps, or a related field.
- Hands-on experience with GCP security services and concepts.
- Experience securing cloud infrastructure, identities, workloads, applications, and data.
- Understanding of IAM, encryption, logging, threat detection, vulnerability management, and incident response.
- Familiarity with application security, secrets management, dependency scanning, and secure deployment practices.
- Strong troubleshooting, analytical, and communication skills.
Preferred Qualifications
- Google Professional Cloud Security Engineer, Azure AZ-500, Security , or equivalent certifications.
- Experience with CNAPP/CSPM tools and cloud security posture management.
- Knowledge of Kubernetes and container security.
- Exposure to SAST, DAST, SCA, secrets detection, and software supply chain security.
- Familiarity with CIS Benchmarks, NIST 800-53, PCI-DSS, or ISO 27001.
- Scripting experience with Python, PowerShell, or Bash.
- Ability to work independently and proactively identify and mitigate security risks.
Compensation: Base salary up to $130,000 annually, with eligibility for a 12.5% bonus.
Work Arrangement: Hybrid — candidates should be comfortable working onsite in Bolingbrook, Illinois, as required.