Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Senior Cloud Security Engineer role.
Rezi rewrites your resume against Guardian Life Insurance's job description. Free.
Tailor your resume to this Senior Cloud Security Engineer role.
Rezi rewrites your resume against Guardian Life Insurance's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Security Engineer posting at Guardian Life Insurance — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Senior Cloud Security Engineer posting at Guardian Life Insurance — free, in seconds.
About the Role
Guardian is seeking a Senior Cloud Security Engineer to implement and continuously improve security capabilities across our cloud environment. This role will serve as a senior technical contributor across Cloud-Native Application Protection (CNAPP), Cloud Security Posture Management (CSPM), AWS-native identity security controls and services, Public Key Infrastructure (PKI), and other cloud security controls within a complex, highly regulated environment. This role is responsible for translating security and architecture requirements into scalable engineering solutions, strengthening controls across the cloud lifecycle from code to runtime, and helping teams identify and address cloud security risk.
Responsibilities
- Implement, and continuously improve AWS security capabilities spanning identity, cryptography and PKI, cloud security posture, and cloud-native application protection.
- Engineer scalable AWS access controls, including IAM policies, SCPs, cross-account access models, and least-privilege patterns.
- Implement and enhance cloud security controls for continuous monitoring, threat detection, vulnerability management, workload protection, and automated remediation across the application lifecycle.
- Integrate AWS security capabilities with enterprise CNAPP and CSPM platforms and help operationalize security controls from code through runtime.
- Manage and enhance cloud cryptographic capabilities, including AWS KMS, ACM, encryption controls, certificate management, and enterprise PKI integrations.
- Assess the AWS security landscape, identify control gaps and emerging risks, and drive improvements across identity, encryption, workloads, containers, and other cloud security domains.
- Partner with Cloud Architecture, DevOps, application teams, and business stakeholders to gather requirements and translate them into technical designs, reusable security patterns, and guardrails.
- Develop automation and integrate security controls into Infrastructure as Code and CI/CD processes to identify and remediate risk earlier in the development lifecycle.
- Perform advanced analysis of cloud security posture and runtime risks and develop meaningful reporting, documentation, and presentations for technical and business stakeholders.
- Establish and support cloud governance and control processes aligned with enterprise security, regulatory, and audit requirements.
- Develop engineering documentation and operational runbooks that improve consistency, scalability, and audit readiness.
- Collaborate across Cybersecurity, Architecture, Cloud Engineering, Infrastructure, Compliance, and application teams to ensure cloud security capabilities align with enterprise strategy.
- Stay current on AWS security capabilities, CNAPP technologies, cloud-native threats, cryptographic technologies, and industry best practices, and apply that knowledge to continuously strengthen Guardian's cloud security posture.
Requirements
- 5+ years of experience in IT, cybersecurity, cloud engineering, or related disciplines.
- 5+ years of hands-on AWS security experience, including strong knowledge of IAM, PKI, CSPM, and CNAPP capabilities.
- Hands-on experience designing and implementing AWS identity controls, including IAM Identity Center, least-privilege policies, Service Control Policies (SCPs), cross-account access, and RBAC/ABAC models.
- Experience deploying and managing AWS Key Management Service (KMS), AWS Certificate Manager (ACM), and enterprise PKI capabilities.
- Experience implementing or operating CNAPP and CSPM platforms, such as Wiz, Prisma Cloud, and AWS Security Hub for posture management, workload protection, risk prioritization, and remediation.
- Strong understanding of cloud security principles, including zero trust, encryption at rest and in transit, workload and container security, identity boundaries, and network security.
- Experience with Infrastructure as Code (IaC) and security automation using technologies such as Terraform, CloudFormation, CI/CD pipelines, and shift-left security practices.
- Experience with security and compliance frameworks such as NIST, CIS, SOC 2, SOX, NYDFS, and Model Audit Rule (MAR), as well as the AWS Well-Architected Framework Security Pillar.
- A bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
- Experience supporting security technology evaluations, including RFP/RFI processes, vendor assessments, and proofs of concept.
- Must be legally authorized to work in the United States, without the need for employer sponsorship/support now or at any time in the future.
Skills
- AWS security
- IAM
- PKI
- CSPM
- CNAPP
- IAM Identity Center
- least-privilege policies
- Service Control Policies (SCPs)
- cross-account access
- RBAC/ABAC models
- AWS Key Management Service (KMS)
- AWS Certificate Manager (ACM)
- enterprise PKI
- Wiz
- Prisma Cloud
- AWS Security Hub
- zero trust
- encryption at rest and in transit
- workload and container security
- identity boundaries
- network security
- Infrastructure as Code (IaC)
- security automation
- Terraform
- CloudFormation
- CI/CD pipelines
- shift-left security practices
- NIST
- CIS
- SOC 2
- SOX
- NYDFS
- Model Audit Rule (MAR)
- AWS Well-Architected Framework Security Pillar
Location
- Holmdel, NJ
- New York, NY
- Bethlehem, PA
Work Type
- Hybrid
Experience Level
- 5+ years of experience in IT, cybersecurity, cloud engineering, or related disciplines
- 5+ years of hands-on AWS security experience
Education Level
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience
Salary/Compensations
- $118,980.00 - $195,465.00
Benefits
- Support and flexibility to achieve professional and personal goals
- Skill-building
- Leadership development
- Philanthropic opportunities
- Opportunities to build communities and grow your career
- Diverse colleagues with high ethical standards
- Contemporary, supportive, flexible, and inclusive benefits and resources
About the Company
- At Guardian, you’ll have the support and flexibility to achieve your professional and personal goals.
- Inspire Well-Being
- As part of Guardian’s Purpose – to inspire well-being – we are committed to offering contemporary, supportive, flexible, and inclusive benefits and resources to our colleagues.
- Explore our company benefits at www.guardianlife.com/careers/corporate/benefits.
- Benefits apply to full-time eligible employees.
- Interns are not eligible for most Company benefits.
Equal Opportunity
- Guardian is an equal opportunity employer. All qualified applicants will be considered for employment without regard to age, race, color, creed, religion, sex, affectional or sexual orientation, national origin, ancestry, marital status, disability, military or veteran status, or any other classification protected by applicable law.
- Guardian is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities.
- Guardian also provides reasonable accommodations to qualified job applicants (and employees) to accommodate the individual's known limitations related to pregnancy, childbirth, or related medical conditions, unless doing so would create an undue hardship.
- If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact MyHR@glic.com.
- Guardian Life is not currently or in the foreseeable future sponsoring employment-based visas (e.g., such as an H-1B).
- As part of Guardian’s job application process, Guardian may use artificial intelligence tools (“AI Tools") to automate the sorting and filtering of information provided by applicants as part of its preliminary screening.
- At Guardian, we do not use AI Tools to substantially assist or replace human judgment or discretionary decision making in our hiring process. All hiring decisions will be made by Guardian colleagues.
- Please be aware that if you apply for a specific position with Guardian, you will have the choice of opting out of Guardian’s use of AI Tools during the job application process.
- If you would like to request an alternative process that does not utilize AI Tools or would like to request a reasonable accommodation, within ten business days of your position application, you must email your request to MyHR@glic.com, making sure to provide your name and job requisition identification number.