Senior Cloud Controls Engineer

Title : Senior Cloud Controls Engineer Location: Alpharetta, GA – 30022(Hybrid - 3 days onsite, 2 days remote):We are seeking a Senior Cloud Controls Engineer to join our dynamic team. The ideal candidate will have strong experience in cloud security engineering, policy-as-code, and infrastructure-as-code across AWS, Azure, and GCP and a proven ability to design, implement, and operationalize deploy-time security controls integrated into Terraform and CI/CD pipelines.Responsibilities:Design and implement deploy-time cloud security controls using OPA/Rego and Regula for Azure, AWS, and GCP.Translate firm-wide configuration baselines into enforceable policy-as-code integrated with Terraform workflows and CI/CD pipelines.Own the control lifecycle from requirement interpretation through policy authoring, testing, optimization, and pipeline deployment.Establish and maintain reusable policy libraries and modules for consistency and scale.Provide technical expertise in Terraform, infrastructure-as-code patterns, and secure pipeline orchestration.Define and implement unit and integration testing strategies for policy validation and drift detection.Identify gaps not enforceable at deploy-time and propose compensating controls or alternative enforcement points.Contribute to a unified control framework spanning deploy-time and runtime evaluation.Partner with engineering, architecture, risk, and business stakeholders to advance cloud security strategy and standards.Serve as a senior technical contributor, conduct code reviews, lead design discussions, and mentor peers on OPA/Rego, Regula, Terraform, and pipeline design.Communicate technical concepts to engineering teams, stakeholders, and senior leadership to reduce delivery friction and improve clarity.Required Skills & Qualifications:Bachelor’s degree in computer science, Information Security, or related field, or equivalent experience.7+ years in cloud security engineering with focus on infrastructure-as-code and deployment pipelines.Production experience designing and implementing policy-as-code with OPA/Rego and/or Regula.Deep Terraform expertise including module design, state management, and secure configuration patterns.Strong experience integrating controls into CI/CD pipelines with gating and enforcement mechanisms.Ability to translate security requirements into automated, testable, enforceable deploy-time controls.Solid understanding of AWS, Azure, and/or GCP security architectures including IAM, networking, and data protection.Experience with control validation strategies, policy unit testing, pipeline validation, and drift detection.Familiarity with CSPM platforms and alignment of deploy-time controls with runtime detection and compliance.Understanding of modern cloud threat models, attack paths, and misconfiguration risks with preventive mitigations.Experience building reusable policy libraries and shared control frameworks at enterprise scale.Experience as a senior engineer on complex initiatives, including prioritization, delivery planning, and technical direction, with demonstrated mentoring ability.Preferred Skills:Experience aligning deploy-time controls with runtime evaluation in unified control frameworks.Background in secure pipeline patterns, code review practices, and engineering standards for policy development.Warm Regards,Preeti SrivastavaSenior IT RecruiterEmail: [email protected]: 713 255 2052