Multi Cloud Security Engineer

Multi Cloud Security EngineerSunnyvale, CA6+ Months Contract to HireMust-Have Requirements:Multi-Cloud IAM: Strong AWS IAM plus hands-on IAM security experience in at least one of Azure Entra ID, GCP, or OCI.IAM Implementation: Personally designed and implemented IAM roles, custom policies, permission sets, least-privilege controls, service accounts, and access governance.IAM Standardization: Experience establishing and enforcing consistent security baselines across multiple cloud environments.Kubernetes Security: Hands-on implementation of Kubernetes RBAC, network policies, admission controllers, secrets management, and cluster hardening.Terraform: Strong experience implementing cloud security policies and guardrails through Infrastructure-as-Code.Multi-Cloud Networking: Practical experience with cloud networking and security controls.AI Security: Experience with AI-driven security identification, validation, or remediation.CSPM: Experience with Wiz or comparable tools, including actual vulnerability remediation.Key ResponsibilitiesCloud Infrastructure Security: Securely deploy and maintain infrastructure across AWS, Azure, GCP, and OCI, establishing cloud-specific guardrails that prevent insecure deployments and configurations.Kubernetes Cluster Hardening: Implement and enforce security best practices for cloud-native Kubernetes clusters, including granular Role-Based Access Control (RBAC), network policies, and admission controllers.Identity & Access Management (IAM): Develop and enforce authentication and authorization policies across all systems. Manage identities across Active Directory, email platforms, and cloud solutions, and enforce least privilege at the cloud, cloud-service, and container levels.Container Security: Secure container images, registries, and runtime environments using Docker, Podman, and container scanning solutions.Infrastructure-as-Code (IaC) Security: Manage infrastructure and security policies in version-controlled Git repositories using Terraform, CloudFormation, or AWS CDK for consistent, auditable, and secure deployments.Cloud Security Posture Management (CSPM): Maintain CSPM tools such as Wiz to continuously detect and remediate misconfigurations and compliance drift.Compliance Automation: Automate compliance checks and generate audit evidence across the multi-cloud environment.Runtime Security: Monitor and protect running applications and containers from threats throughout their operational lifecycle.