Cloud Security Engineer

About Workstreet

At Workstreet, we're on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in GRC (governance, risk, and compliance) services that support SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.

Get to Know the Security Services Team

Our Cloud Security Engineering team designs hardened AWS, Azure, and GCP environments, writes Terraform baselines, and fixes failing controls to meet frameworks like SOC 2, ISO 27001, CMMC, and FedRAMP.

The Opportunity

Workstreet is seeking a Manager, Cloud Security Engineering to lead a team of Cloud Security Engineers who design, build, and operate cloud security controls for clients across AWS, Azure, and GCP. This is a player-coach leadership role. You will own the quality, capacity, and consistency of Cloud Security Engineering delivery, including hiring and developing engineers, staffing client engagements, setting engineering standards, and serving as the escalation point. You will work with client engineering leads and executives during U.S. Eastern Time business hours.

What You'll Do

• Lead and develop the team through coaching, feedback, performance reviews, and career paths.
• Hire and onboard engineers.
• Own delivery across the client portfolio, including capacity planning and milestone tracking.
• Serve as the escalation point for technical and relationship issues.
• Set engineering standards with reusable Terraform and CloudFormation baselines, landing zone patterns, IAM and logging modules, and code review practices.
• Guide cloud architecture decisions across AWS, Azure, least-privilege IAM, network segmentation, and encryption.
• Direct deployment and tuning of AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud, including SIEM logging pipelines.
• Embed security in delivery pipelines, including SAST, DAST, and secret scanning in GitHub Actions or Azure DevOps.
• Translate frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP into functional controls.
• Oversee cloud security incident response.
• Collaborate with GRC delivery teams and provide technical input on scoping and new client opportunities.
• Continuously improve the practice through delivery metrics and automation.
• Stay hands-on in architecture reviews, complex remediations, and client workshops.

Who You Are

• Technical leader of cloud security engineers with experience hiring, coaching, and retaining engineers.
• Multi-cloud security expert with hands-on experience securing AWS, Azure, and GCP, including IAM strategy, network zoning, encryption, and logging.
• Infrastructure as Code authority, fluent in Terraform with working knowledge of CloudFormation, Python, or Bash.
• GRC infrastructure strategist who maps cloud configurations to SOC 2, ISO 27001, GDPR, and HIPAA requirements.
• Delivery operator who thrives in a fast-paced startup environment.
• Trusted client advisor who partners with US-based technology founders, DevOps leads, and executives.
• Elite communicator in written and verbal English.

What Will Help You Succeed

• Cloud security certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.
• Experience building or scaling a security engineering team in a consulting, MSSP, or hyper-growth environment.
• Federal and regulated environment experience building CMMC-compliant enclaves or FedRAMP architectures.
• Practical experience with FIPS 140 encryption implementation across cloud services.
• Container and DevSecOps experience with microservices, Docker, and Kubernetes.
• Experience with Zero Trust deployment models.
• Advanced use of logging platforms, SIEM, vulnerability management, and threat hunting.

What We Offer

• Career development with mentorship and training.
• Role-related training reimbursement.
• Competitive base salary with performance reviews and bonus opportunities.
• Growth opportunity in an early-stage company.
• Remote-first culture with flexibility to work from anywhere.

What You'll Need to Thrive

• Excellent written and verbal English communication skills.
• A reliable high-speed internet connection and a professional home office environment.
• Commitment to a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time.
• Willingness to travel locally for occasional onsite meetings.

Hiring and Selection Process

• Candidates must participate in live video interviews with camera on.
• Employment is contingent upon successful identity verification and background screening, where permitted by law.
• Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders.
• Candidates will receive prompt updates throughout the interview process.

Equal Opportunity

Workstreet is an equal opportunity employer and is committed to providing employment opportunities to all individuals regardless of protected characteristics.