Cloud Security Engineer

About Workstreet

At Workstreet, we're on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.

Get to Know the Security Services Team

We are the team that turns complex security requirements and compliance frameworks into infrastructure and services that actually work. Our Cloud Security Engineering team designs hardened AWS, Azure, and GCP environments, writes Terraform baselines, and fixes failing controls to meet frameworks like SOC 2, ISO 27001, CMMC, and FedRAMP.

The Opportunity

Workstreet is seeking a Manager, Cloud Security Engineering to lead a team of Cloud Security Engineers who design, build, and operate cloud security controls for our clients across AWS, Azure, and GCP. This is a player-coach leadership role for someone who has built hardened cloud environments themselves and now wants to multiply that impact through a team.

You will own the quality, capacity, and consistency of Cloud Security Engineering delivery, and you will work with client engineering leads and executives during U.S. Eastern Time business hours.

What You'll Do

• Lead and develop the team: manage, coach, and grow Cloud Security Engineers through clear expectations, regular feedback, performance reviews, and defined career paths.
• Hire and onboard: build the interview process, recruit and select engineers, and onboard them so they take direct ownership of client work quickly.
• Own delivery across the client portfolio: plan capacity, assign engineers to engagements, track milestones and quality, and keep concurrent engagements on schedule.
• Serve as the escalation point: handle technical and relationship escalations calmly, and lead conversations with client engineering leads and executives.
• Set engineering standards: define and maintain reusable Terraform and CloudFormation baselines, landing zone patterns, IAM and logging modules, and code review practices.
• Guide cloud architecture decisions: review designs for AWS multi-account structures, Azure Hub-Spoke and Landing Zone architectures, least-privilege IAM, network segmentation, and encryption.
• Direct native security tooling: set the approach for deploying and tuning AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud, including logging pipelines for SIEM ingestion.
• Embed security in delivery pipelines: establish guardrails and automated remediation workflows, including SAST, DAST, and secret scanning in GitHub Actions or Azure DevOps.
• Translate frameworks into functional controls: ensure technical controls satisfy SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP requirements in practice.
• Oversee incident response: set the escalation path for cloud security incidents and ensure rapid containment, diagnostics, and post-incident improvements.
• Collaborate across Security Services and GRC: coordinate with GRC delivery teams and provide technical input on scoping, statements of work, and new client opportunities.
• Continuously improve the practice: track delivery health, remediation cycle times, and module reuse, and invest in tooling and automation.
• Stay hands-on where it counts: step into architecture reviews, complex remediations, and client workshops to unblock engineers.

Who You Are

• Technical leader of cloud security engineers: experienced people manager who has hired, coached, and retained engineers.
• Multi-cloud security expert: deep, hands-on background securing AWS, Azure, and GCP environments, including IAM strategy, network zoning, encryption, and logging.
• Infrastructure as Code authority: fluent in Terraform, with working knowledge of CloudFormation, Python, or Bash.
• GRC infrastructure strategist: maps technical cloud configurations to SOC 2, ISO 27001, GDPR, and HIPAA requirements.
• Delivery operator: thrives in a fast-paced startup environment, balancing multiple client portfolios and competing priorities.
• Trusted client advisor: partners with US-based technology founders, DevOps leads, and executive teams.
• Elite communicator: delivers precise written and verbal English communication that translates complex cloud risks into clear business decisions.

What Will Help You Succeed

• Validated cloud security credentials: active certifications such as AWS Certified Security – Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.
• Experience building or scaling a security engineering team: in a consulting, MSSP, or hyper-growth technology environment.
• Federal and regulated environment experience: hands-on history building CMMC-compliant enclaves or FedRAMP security architectures, including NIST 800-53 and NIST 800-171 control implementation.
• FIPS 140 encryption implementation: practical experience configuring and enforcing FIPS 140 standards across cloud services.
• Container and DevSecOps engineering: experience securing microservice architectures, Docker, and Kubernetes, including runtime security controls and vulnerability scanning.
• Zero Trust deployment models: direct experience with identity-centric security policies, network micro-segmentation, and context-aware access.
• Monitoring and detection tooling: advanced use of logging platforms, SIEM, vulnerability management engines, and threat hunting feeds.

What we offer

• Career Development: Clear path with mentorship and training opportunities.
• Role-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.
• Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
• Growth Opportunity: Early-stage company with significant room for career advancement.
• Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

What you'll need to thrive

• Excellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.
• A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.
• Commitment to working a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time (ET).
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Hiring and Selection Process

• Candidates must participate in live video interviews throughout the hiring process with camera on and be prepared to verify their identity during recruitment and onboarding.
• Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
• Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders.
• Candidates will receive prompt updates and consistent communication throughout the interview process.

Workstreet Is An Equal Opportunity Employer

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.