CLOUD SECURITY ENGINEER @ BLUEMOJO SOLUTIONS
We are seeking a highly skilled Cloud Security Engineer to join our team, focusing on the design and implementation of secure cross-cloud architectures specifically within Azure and GCP environments. The successful candidate will play a pivotal role in establishing robust authentication and authorization frameworks, ensuring that our cloud infrastructure remains resilient against evolving security threats. You will lead efforts in configuring secure identity flows and managing cloud-based secrets to protect sensitive data across the organization. This position requires a collaborative approach, working closely with development teams to integrate security best practices into the software development lifecycle. By leveraging modern security protocols like OAuth 2.0 and OpenID Connect, you will ensure seamless and secure access across disparate cloud services. Additionally, you will be responsible for creating detailed architectural documentation and diagrams to support identity management strategies and facilitate clear communication across technical teams. Experience in regulated environments, particularly within the healthcare sector following HIPAA standards, is highly desirable as we maintain strict compliance for our data handling processes. Your expertise in tools like Azure Key Vault and GCP Secret Manager will be essential in maintaining a high security posture.
Key Requirements
Minimum of 8 years of professional experience in cloud security engineering or identity management.
Strong expertise in cross-cloud security architecture specifically for Azure and GCP platforms.
Advanced proficiency in OAuth 2.0 and OpenID Connect protocols, including token management and flow design.
Hands-on experience with Azure Entra (Azure AD), including RBAC, managed identities, and conditional access policies.
Deep technical knowledge of GCP Workload Identity Federation for cross-cloud integration.
Expertise in secure REST API design, including mTLS and API Gateway policies.
Proficiency in secrets management using tools like Azure Key Vault, GCP Secret Manager, or HashiCorp Vault.
Proven ability to create detailed architectural documentation and identity flow diagrams.
Experience with AI-assisted development tools such as GitHub Copilot to enhance engineering productivity.
Familiarity with containerization using Docker and implementing security within CI/CD pipelines.
Knowledge of healthcare data standards such as HIPAA, HL7, and FHIR is preferred.
Strong communication skills for collaborating with cross-functional technical teams and stakeholders.