Cloud Security Engineer

Kforce has a client that is seeking a Cloud Security Engineer in Bolingbrook, IL. Summary: We are seeking a Cloud Security Engineer with hands-on experience securing cloud environments, with a strong emphasis on Google Cloud Platform (GCP). This is a hands-on engineering role focused on cloud security operations, identity and access management, security controls, and improving security posture across modern cloud environments. The ideal candidate has a solid foundation in cloud security and enjoys solving technical problems, working across engineering teams, and independently researching and resolving security challenges. Duties:

• Support day-to-day cloud security operations within primarily GCP environments
• Manage Identity & Access Management (IAM) activities, including roles, permissions, access provisioning, and service accounts
• Implement and maintain cloud security controls, policies, and secure configuration standards
• Review cloud environments for security risks, vulnerabilities, misconfigurations, and access concerns
• Help secure cloud infrastructure, workloads, applications, containers, and data services
• Monitor and respond to cloud security findings, alerts, and vulnerabilities
• Support vulnerability remediation and security posture improvement initiatives
• Assist with cloud security incident investigation and root cause analysis
• Support security controls within CI/CD and DevSecOps workflows, including vulnerability scanning, secrets detection, and policy validation
• Partner with application, development, infrastructure, platform, and security teams to resolve security issues and support secure cloud adoption
• Contribute to security automation through scripting, Infrastructure as Code (IaC), and cloud-native tooling
• Support security assessments and compliance activities aligned with frameworks such as NIST and CIS

Requirements:

• 3+ years of experience in cloud security, cybersecurity, cloud engineering, DevSecOps, or a related technical field
• Strong hands-on experience with Google Cloud Platform (GCP)
• Experience with GCP IAM, including roles, permissions, service accounts, and access management
• Experience supporting cloud security operations, including access requests, security findings, vulnerabilities, and remediation
• Familiarity with DevOps or DevSecOps environments and CI/CD processes
• Familiarity with security frameworks and controls such as NIST, CIS Benchmarks, PCI-DSS, or ISO 27001
• Understanding of cloud infrastructure, networking, identity, data protection, and workload security
• Understanding of security fundamentals including IAM, encryption, logging, vulnerability management, and threat detection
• Strong troubleshooting and problem-solving skills
• Strong communication skills with the ability to work effectively with both technical and business stakeholders
• Ability to work independently, research solutions, and take ownership of assigned security requests and issues

Nice to Have:

• Relevant cloud or security certifications such as Google Professional Cloud Security Engineer, AZ-500, Security+, or equivalent
• Experience with Azure security in addition to GCP
• Experience with cloud security posture management or CNAPP/CSPM technologies
• Experience with scripting or automation using Python, PowerShell, Bash, or similar technologies
• Experience with Infrastructure as Code and security automation
• Exposure to Kubernetes and container security
• Familiarity with application security practices such as SAST, DAST, dependency scanning, secrets detection, or software composition analysis