Senior Cloud Security Engineer

About the role

Semperis is expanding its Cloud Security team to build secure‑by‑default platforms across Azure and AWS. The Senior Cloud Security Engineer will focus on preventive controls, scalable guardrails, Kubernetes security, network security, and automation.

Key responsibilities

• Own the security architecture, guardrails, and automation patterns while partnering with platform and infrastructure teams.
• Own and evolve Cloud Security Posture Management (CSPM) capabilities, including policies, guardrails, and automated remediation.
• Engineer and maintain cloud network security controls such as segmentation, cloud‑native firewalls, WAFs, and secure ingress/egress patterns.
• Define and enforce security best practices for Kubernetes environments (AKS/EKS), covering RBAC, network policies, workload isolation, and cluster hardening.
• Partner with engineering teams on architecture reviews for new services and major changes to ensure secure, compliant designs.
• Engineer and maintain identity and access security controls for cloud and production environments, including least‑privilege and workload identity.
• Apply a security lens to FinOps, creating guardrails that balance cost optimization with security and compliance.
• Develop tooling, automation, and self‑service workflows to reduce manual effort and improve consistency across security programs.

Required profile

• 6+ years of experience in cloud security, security engineering, or cloud platform engineering.
• Deep hands‑on security experience in Azure or AWS; experience across both strongly preferred.
• Hands‑on experience securing production AKS/EKS environments, including RBAC, network policies, and cluster hardening.
• Proven experience with cloud network security, firewalls, WAFs, segmentation, and secure connectivity patterns.
• Strong understanding of cloud security architecture, shared responsibility models, and defense‑in‑depth.
• Experience with preventative security controls such as CSPM, policy enforcement, and secure cloud baselines.
• Cloud automation experience using IaC tools (Terraform, Bicep, CloudFormation) and scripting (Python, PowerShell, Bash).
• Ability to operate independently, own complex problem spaces, and deliver practical, scalable solutions.

Required skills

• Azure
• AWS
• AKS
• EKS
• Kubernetes security (RBAC, network policies, workload isolation)
• Cloud network security (firewalls, WAF, segmentation)
• CSPM
• Terraform
• Bicep
• CloudFormation
• Python
• PowerShell
• Bash