RRemoteville
SOTA Cloud logoSOTA Cloud

Senior / Staff Platform Security Engineer

Skills
DevopsSoftware As A ServiceCCSPHealthcareISO 27001ISO StandardsManagement
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • 8+ years in cloud security platform security security engineering infrastructure security DevSecOps SRE DevOps or similar technical infrastructure roles
  • 4+ years in security-focused roles such as platform security cloud security application security DevSecOps or production security engineering
  • Deep hands-on Azure experience including AKS Entra ID networking storage Azure SQL secrets management monitoring and production access controls
  • Strong understanding of cloud platform security architecture least privilege secure configuration production access and vulnerability remediation
  • Hands-on experience with Kubernetes security container security workload identity network controls and production runtime hardening
  • Experience with vulnerability management and practical prioritization based on exploitability exposure and business impact
  • Experience with privileged access models just-in-time access PIM access reviews and least-privilege controls
  • Experience with infrastructure as code using Terraform Bicep or comparable tooling
  • Practical familiarity with CI/CD pipelines and software delivery workflows
  • Ability to work directly with software engineers to explain and remediate security findings
  • Ability to communicate technical security controls clearly to compliance privacy engineering IT and executive stakeholders
  • Strong written communication skills for documentation findings exceptions remediation plans and audit evidence
  • Ability to operate independently identify gaps make recommendations and drive approved work to completion

Nice to have

  • Independent
  • Practical
  • Hands-on
  • Strong communicator
  • Cross-functional
  • High ownership

Day to day

  • Own platform security strategy and hands-on implementation across Azure and AKS environments
  • Harden Kubernetes workloads identity secrets handling networking and production runtime with practical security controls
  • Partner with engineering compliance and leadership to triage vulnerabilities improve privileged access and deliver audit-ready evidence