Senior Cloud Security Engineer

Tenarai is the employer offering this position. The role involves working on a strategic Policy-as-Code (PaC) initiative focused on enterprise cloud security guardrails, compliance automation, and secure cloud deployment standards.

• 8+ years of experience in Cloud Engineering, Cloud Security, DevSecOps, Platform Engineering, or related disciplines.
• Demonstrated experience designing and implementing Policy-as-Code solutions in enterprise environments.
• Advanced knowledge of: Terraform, Bicep, Infrastructure as Code (IaC), Policy as Code (PaC).
• Strong experience with cloud platforms, including: Microsoft Azure; multi-cloud experience preferred (AWS and/or GCP).
• Hands-on experience with: Azure Policy, Open Policy Agent (OPA), compliance automation, security guardrails.
• Experience integrating security controls into GitHub Enterprise, GitHub Actions, Azure DevOps, CI/CD pipelines.
• Strong scripting and automation skills using one or more: PowerShell, Python, Bash.
• Experience implementing security and compliance frameworks such as SOC 2, NIS2, CIS Benchmarks, NIST.

Nice to have:

• Experience building enterprise cloud landing zones and platform engineering solutions.
• Experience creating and maintaining reusable Terraform module libraries.
• Knowledge of cloud security posture management (CSPM) and continuous compliance monitoring.
• Familiarity with Zero Trust architecture and cloud security best practices.
• Experience supporting large-scale cloud transformation programs.
• Ready-to-go senior consultant with minimal onboarding required.
• Strong communicator who can work across security, engineering, and operations teams.
• Self-directed and capable of driving complex technical workstreams independently.
• Comfortable operating in fast-moving environments with multiple concurrent initiatives.
• Able to translate security requirements into practical engineering solutions.
• Proven track record delivering enterprise-scale cloud automation, governance, and security outcomes.

• Design, implement, and operationalize Policy-as-Code frameworks across enterprise cloud environments.
• Develop and maintain security guardrails using technologies such as Open Policy Agent (OPA), Azure Policy, policy validation frameworks, Compliance-as-Code.
• Translate security requirements, control frameworks, and regulatory requirements into machine-readable policies.
• Integrate policy enforcement into CI/CD pipelines to validate infrastructure before deployment.
• Develop reusable Infrastructure-as-Code modules and deployment templates.
• Implement cloud security controls within: Terraform, Bicep, ARM Templates.
• Establish automated compliance validation and continuous assurance capabilities.
• Partner with Cloud Engineering, Platform Engineering, DevOps, and Security teams to embed security controls into cloud delivery processes.
• Develop automation and scripting solutions to improve deployment consistency and compliance enforcement.
• Contribute to enterprise cloud governance, platform standardization, and security architecture initiatives.
• Support migration and modernization of CI/CD processes across GitHub and Azure DevOps environments.
• Create technical documentation, standards, patterns, and implementation guidance.

Must possess a legal work permit in Poland.

Data administrator is Tenarai based in Los Gatos, CA, US. Personal data will be processed for recruitment purposes. Providing data required by Polish Labour Code is mandatory; other data is voluntary. Data will be retained until completion of recruitment and for potential claims. Consent may be withdrawn anytime. Data recipients include Just Join IT and related entities involved in recruitment processing.