Source Job

$159,000–$210,500/yr
US Unlimited PTO

  • Lead cloud security architecture and posture management across large multi-subscription Azure and AWS environments.
  • Design policy-as-code guardrails and automated controls to prevent misconfigured infrastructure from reaching production.
  • Partner with engineering teams to integrate security into CI/CD, threat modeling, and vulnerability management.

AWS Azure Python

20 jobs similar to Principal Cloud Security Engineer

Jobs ranked by similarity.

$200,000–$250,000/yr
North America

  • Design and build security guardrails, automation, and detection across AWS, GCP, and Azure.
  • Secure IaC, CI/CD pipelines, and software supply chain with policy as code and least-privilege IAM.
  • Partner with platform, infrastructure, and compliance teams to drive security findings to remediation.

Tessera Labs is a technology company focused on securing cloud infrastructure across AWS, GCP, and Azure. The culture emphasizes a DevOps mindset, automation, and close collaboration with engineering and compliance teams.

US Unlimited PTO 12w maternity 12w paternity

  • Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
  • Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
  • Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.

Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.

Germany 6w PTO

  • Define binding security requirements and reference architectures for AWS and Azure, including landing zones, IAM, network segmentation, encryption, and logging.
  • Support Cloud & AI Platforms and Engineering teams in an advisory role through security and architecture reviews, handling deviations and escalations.
  • Build security gates, pipeline templates, and Policy as Code to enforce security automatically in CI/CD pipelines.

The Quality Group is an innovative provider of sports nutrition products, bringing together the brands ESN and More Nutrition. With over 1,200 employees, the company combines passion for sports nutrition and healthy foods with cutting-edge technology, production, and logistics in an agile, inclusive culture.

India

  • Own security architecture across Azure and AWS, covering tenant design, network segmentation, and workload isolation.
  • Raise the engineering bar with hardened infrastructure-as-code modules, secure defaults, and policy-as-code signals at commit time.
  • Own vulnerability and exposure management end to end, delivering findings as pull requests, not tickets.

One Identity enables organizations to secure, manage, monitor, protect, and analyze information and infrastructure to drive innovation. With a globally distributed team, we build enterprise products at scale and foster a collaborative, improvement-driven culture.

$135,900–$153,000/yr
US

  • Design and implement IAM models, RBAC, and privileged access controls for a secure Azure tenant.
  • Configure Defender for Cloud, Azure Policy, logging, monitoring, and key vault solutions.
  • Support compliance efforts and secure IaC/CI/CD practices while collaborating with engineers and stakeholders.

Nava is a consultancy and public benefit corporation modernizing government services through human-centered design and secure cloud infrastructure. Since 2015, it has partnered with federal, state, and local agencies, fostering a collaborative, remote-first culture focused on public good.

$90,000–$110,000/yr
US

  • Manage Azure and AWS cloud infrastructure, including deployment, maintenance, backups, and disaster recovery.
  • Administer security, compliance, and enterprise AI services with governance and cost controls.
  • Collaborate with IT teams to optimize multi-cloud operations and support on-call rotations.

NuvemRx helps community health providers simplify pharmacy operations with scalable software, intelligence, and expert support. As a fast-growing company, NuvemRx values ownership, integrity, and collaboration, holding a high bar because our work directly impacts patient care.

US Unlimited PTO

  • You will own delivery of platform solutions across teams, aligning technical direction with business goals.
  • You will lead standardization of cloud platform patterns, IaC, and CI/CD implementations.
  • You will drive observability, security, and cost efficiency across infrastructure.

Nextech is a leader in specialty healthcare technology solutions. They are committed to hiring and retaining talent with competitive pay, great benefits, and a culture of diversity and inclusion.

$150,000–$180,000/yr
US 20w maternity 12w paternity

  • Lead security architecture across cloud, platform, and AI systems.
  • Drive threat modeling, vulnerability management, and incident response.
  • Embed automated security testing into CI/CD and infrastructure-as-code.

Axios is a respected media company delivering trustworthy, award-winning news in an audience-first format known as Smart Brevity. The company fosters an open, inclusive culture, invests in AI literacy, and supports employees with flexibility and development stipends.

$209,000–$243,000/yr
US Unlimited PTO

  • Lead technical security design and review for security-critical systems, ensuring data protection and resilience.
  • Master complex technical security domains like Cloud Security, AppSec, or Data to solve business and technical challenges.
  • Architect automated defenses and translate broad security objectives into clear deliverables for the engineering team.

Garner partners with employers to transform U.S. healthcare by using proprietary clinical metrics to connect members with top-performing doctors, improving care while reducing costs. A mission-driven team that has helped over 2.5 million people and saved $1B, doubling five years running.

$157,000–$262,000/yr
US Unlimited PTO

  • Lead cloud architecture engagements from discovery through delivery for Azure, AWS, and Google Cloud.
  • Design secure landing zones, hybrid solutions, and compliance-aligned architecture for regulated clients.
  • Mentor a team of architects and engineers while supporting pre-sales and technical strategy.

Aprio is a Top 20 CPA and advisory firm that brings together proven expertise, deep understanding, and strategic foresight for fast-growing industries. With 40 U.S. offices and over 3,200 team members speaking 60+ languages, it offers a top-rated culture and vast growth opportunities.

US

  • Lead design and implementation of scalable, secure cloud infrastructure across AWS and Azure.
  • Drive architectural vision, automation, and CI/CD improvements across the SDLC.
  • Own incident response, observability, and infrastructure-as-code best practices.

Candidly is an AI-driven student debt and savings optimization platform that partners with employers and financial institutions to serve millions of Americans. It is a fully remote, high-growth Series B startup with an international team of 70+ employees.

$140,000–$160,000/yr
US

  • Design and maintain secure architectures across AWS, Azure, and GCP with infrastructure-as-code and policy-as-code enforcement.
  • Secure AI/ML pipelines and LLM applications, addressing OWASP Top 10 for LLMs and implementing guardrails and content-filtering controls.
  • Drive security operations, including SIEM monitoring, incident response, and supporting HIPAA/HITRUST/SOC 2 compliance.

Reveleer delivers a unified platform for risk adjustment, quality improvement, clinical intelligence, and member management for health plans and provider organizations in value-based care. Trusted by 80+ customer organizations nationwide, the company fosters a collaborative, compliance-focused culture with transparent, human-in-the-loop AI at its core.

US

  • Improve cloud security posture through practical, scalable policy engineering.
  • Deliver reusable Terraform modules and secure-by-default infrastructure patterns.
  • Support FedRAMP and regulated cloud environments with effective technical controls and continuous monitoring.

UltraViolet Cyber is a platform-enabled unified security operations company providing managed and custom-tailored security operations solutions to Fortune 500, Federal Government, and Commercial clients. Founded and operated by security practitioners with decades of experience, the company combines technology innovation and human expertise to make advanced real-time cybersecurity accessible for all organizations.

US

  • Implement security strategies tailored to cloud environments like AWS, GCP, and Azure.
  • Conduct cloud security assessments to identify vulnerabilities and risks in cloud infrastructure.
  • Prepare security compliance reports and execute Security Controls Test plans for ATO requests.

SkyePoint Decisions is a cybersecurity architecture and engineering, IT services provider supporting federal government clients. It is an ISO-certified small business with a collaborative culture that values flexibility and professional development.

$195,000–$225,000/yr
US 4w PTO

  • Set the technical vision for security stack across endpoint, email, data loss prevention, vulnerability management, network, application, and data security.
  • Define long-term cloud and identity security strategy across AWS and Microsoft Azure, including privileged access, phishing-resistant MFA, and governance of non-human identities.
  • Lead security architecture review, threat modeling, DevSecOps strategy, and serve as senior escalation point for complex security incidents.

Imagine Pediatrics is a tech-enabled, pediatrician-led medical group reimagining care for children with special health care needs. They deliver 24/7 virtual-first and in-home medical, behavioral, and social care, working alongside families and providers to break down barriers to quality care.

  • Architect and build multi-cloud security controls, including VPC segmentation and IAM policy design.
  • Build policy-as-code and IaC security guardrails integrated into CI/CD for pre-merge and pre-deploy gates.
  • Own vulnerability management and act as technical escalation point for incidents, leading forensics and remediation.

Coupa provides a community-generated AI and total spend management platform for businesses. The company has a global network of 10M+ buyers and suppliers and fosters a collaborative, transparent culture.

Argentina 18w maternity 12w paternity

  • Own and evolve the cloud platform including compute layer, EKS fleet, and serverless infrastructure across AWS and GCP.
  • Design and maintain infrastructure-as-code and networking layers to ensure reliability, security, and scalability.
  • Build AI-powered automation and observability tools to catch issues before customers notice.

Webflow is the agentic web marketing platform helping modern marketing teams build, manage, and optimize high-performing web experiences. Serving over 2 million users across 190 countries, the company values grit, speed, and craft.

Global

  • Design and maintain security controls across AWS and GCP infrastructure and platform services.
  • Manage IAM, network segmentation, encryption, key management, monitoring, threat detection, and incident response.
  • Own SC TRM and BNM RMiT controls for cloud and infrastructure, including audit and remediation support.

BJAK is a mobile-first insurance platform and the leading insurance platform in Southeast Asia, helping people plan, save, and grow their money. With over 20 nationalities working globally, the team values passionate, driven people who love building next-generation financial applications.

$170,000–$220,000/yr
US 4w PTO 12w maternity 4w paternity

  • Design guardrails for AI-powered products and build automated security tooling for an AI-first workforce.
  • Implement preventive, default-on security controls across cloud and enterprise environments using policy-as-code.
  • Manage identity and access controls for AI systems and non-human agents, and integrate security tooling with LLM layers.

Rithum is the world's most trusted commerce network, accelerating how brands, suppliers, and retailers deliver seamless e-commerce experiences. More than 40,000 companies trust Rithum, representing over $50 billion in annual GMV, and the culture is remote-first, collaborative, and focused on AI-driven innovation.

US

  • Integrate security controls, testing, and policy enforcement into CI/CD pipelines and cloud-native development processes.
  • Partner with engineering teams to design, build, and maintain secure, resilient cloud infrastructure and application environments.
  • Assess and strengthen the security of cloud platforms, identities, networks, containers, Kubernetes environments, and data protection controls.

Kodiak Solutions is a technology company specializing in healthcare finance, unclaimed property, risk management, and revenue cycle management. They offer cloud-based systems and automated workflows designed to help healthcare organizations streamline complex financial operations and focus on patient care.