Sign upLog in

Information Security Cloud Engineer (SME) - Project Engagement

BravoTech

Durant, OK

Apply
JOB DETAILS
SKILLS
Access Control, Amazon Web Services (AWS), Applications Security, Auditing, Best Practices, Billing, CCSP - Cisco Certified Security Professional, CISM - Certified Information Security Manager, CISSP - Certified Information Systems Security Professional, Cloud Architecture, Cloud Computing, Communication Skills, Computer Security, Configuration Management, Consulting, Cross-Functional, Documentation, Driver's License, Engineering, Enterprise Protection, Establish Priorities, GCP (Good Clinical Practices), GIAC - Global Information Assurance Certification, Identity Data Management, Information Technology & Information Systems, Information Technology Consulting, Information/Data Security (InfoSec), Inventory Management, Knowledge Transfer, Machine Tool, Maintain Compliance, Mentoring, Metrics, Microsoft Windows Azure, Network Security, Operations Planning, Oracle, Oracle Database, Oracle ERP, Oracle OCI (Oracle Call Interface), Performance Metrics, Reconciliation, Regulations, Risk, Risk Analysis, Risk Management, Risk Management Framework (RMF), Security Analysis, Security Architecture, Security Information and Event Management (SIEM), Security Monitoring, Software Engineering, Sustainability, Technical Leadership, Telemetry, U.S. National Institute of Standards and Technology (NIST), Use Cases
LOCATION
Durant, OK
POSTED
30+ days ago
BravoTech a Leader in IT Consulting is seeking a talented Information Security Cloud Engineer / Subject Matter Expert (SME) to lead the design, implementation, and operationalization of a comprehensive cloud security program.
This consultant will establish cloud asset visibility, implement security controls, integrate continuous monitoring capabilities, and strengthen governance, risk, and compliance across enterprise cloud environments.
Required Skills & Experience
  • 7+ years of Information Security, Cloud Security, or Security Engineering experience
  • Strong expertise securing Azure, AWS, GCP, and/or Oracle Cloud Infrastructure (OCI)
  • Experience with cloud security architecture, IAM, network segmentation, vulnerability management, logging, telemetry, and continuous monitoring
  • Hands-on experience implementing cloud security baselines and remediation programs
  • SIEM/SOC integration experience
  • Experience securing Oracle environments including OCI, Oracle ERP/HCM, Oracle databases, and identity/access management
  • Strong knowledge of NIST, CIS Controls, Zero Trust, risk management, and compliance frameworks
  • Excellent communication, documentation, and stakeholder management skills
Preferred Certifications
  • CISSP
  • CCSP
  • CISM
  • GIAC Cloud Security
  • Azure Security Engineer
  • AWS Security Specialty
  • Equivalent cloud security certifications
Key Responsibilities
  • Assess cloud environments and security posture
  • Establish enterprise cloud asset inventory and ownership mapping
  • Develop and implement cloud security standards and hardening controls
  • Integrate cloud environments into SOC and continuous monitoring platforms
  • Define and report cloud security KPIs and risk metrics
  • Support audit, compliance, and governance initiatives
  • Create operational runbooks and provide knowledge transfer to internal teams

This role will establish enterprise-wide cloud asset visibility, implement standardized cloud security controls, and integrate continuous monitoring capabilities into the broader information security program. The consultant will serve as a hands-on technical leader focused on reducing cloud security risk, improving governance, strengthening compliance readiness, and enabling long-term operational sustainability.
The ideal candidate brings deep expertise across cloud security architecture, governance, monitoring, risk management, and Oracle-centric enterprise environments.
Job Responsibilities
Cloud Security Assessment & Asset Visibility
  • Assess cloud environments, configurations, security posture, and billing structures, providing recommendations aligned to industry best practices
  • Identify, document, and maintain a comprehensive inventory of cloud assets including:
    • Accounts, subscriptions, and tenants
    • Compute, storage, database, and networking resources
    • Identity objects, service principals, and managed identities
    • Security tooling integrations and logging sources
  • Define asset ownership, business purpose, data classification, and production/non-production tiers
  • Implement automated discovery and reconciliation processes where feasible
  • Align inventory management practices with enterprise configuration management standards
Security Baseline & Cloud Hardening
  • Develop and implement cloud security baseline standards aligned with:
    • Enterprise security policies
    • Regulatory and compliance requirements
    • Industry frameworks including NIST and CIS
  • Establish and validate:
    • Secure configuration standards
    • Identity and access controls
    • Logging, monitoring, and telemetry requirements
    • Network segmentation and exposure controls
  • Identify, prioritize, and remediate high-risk cloud misconfigurations
  • Partner with Infrastructure, Engineering, Application, and Security teams to implement scalable and sustainable security controls
Continuous Monitoring & Detection
  • Integrate cloud environments with approved security monitoring and SOC platforms
  • Enable continuous monitoring for:
    • Configuration drift
    • Unauthorized or insecure deployments
    • Risky user and identity activity
    • High-risk assets and sensitive workloads
  • Establish centralized logging, alerting, escalation criteria, and detection use cases
  • Tune monitoring capabilities to reduce noise while maintaining effective risk coverage
Governance, Risk & Compliance
  • Integrate cloud security findings into enterprise risk management and audit processes
  • Define and report cloud security KPIs/KRIs including:
    • Inventory accuracy and coverage
    • Misconfiguration trends
    • Remediation velocity
    • Monitoring and detection effectiveness
  • Produce documentation suitable for audit, regulatory, and executive review
  • Support audits, tabletop exercises, and risk briefings as needed
Knowledge Transfer & Operational Sustainability
  • Develop operational runbooks, standards, and procedures for cloud inventory management, secure deployment practices, and monitoring escalation
  • Provide knowledge transfer and mentoring to Information Security, SOC, IT, and Engineering teams
  • Dedicate scheduled time weekly to enhance internal cloud security knowledge and operational maturity
  • Ensure the cloud security program is scalable and sustainable beyond the engagement
Deliverables
  • Cloud asset inventory and ownership mapping
  • Cloud environment security assessment
  • Cloud security baseline standards and hardening documentation
  • Risk-ranked remediation roadmap
  • Monitoring architecture and SOC integration documentation
  • Cloud security metrics and reporting framework
  • Audit-ready documentation packages
  • Operational runbooks and knowledge transfer materials
Success Criteria
The engagement will be considered successful when:
  • A complete and accurate cloud asset inventory is established and maintained
  • Cloud security baselines are implemented and enforced
  • Continuous monitoring is operational and integrated into security workflows
  • Cloud security risks are measurable, reportable, and actionable at the executive level
  • Internal teams are equipped to sustain cloud security operations after the engagement
 
Job Qualifications
  • 7+ years of experience in Information Security, Cloud Security, or Security Engineering roles
  • Strong expertise securing enterprise cloud environments across Azure, AWS, GCP, and/or Oracle Cloud Infrastructure (OCI)
  • Experience implementing cloud security controls including IAM, network segmentation, secure configuration standards, logging/telemetry, vulnerability management, and continuous monitoring
  • Proven ability to establish cloud asset visibility, security baselines, remediation programs, and SOC/SIEM integrations
  • Experience securing Oracle environments including OCI, Oracle ERP/HCM platforms, Oracle databases, and related identity/access controls
  • Strong understanding of NIST, CIS, Zero Trust, risk management, and audit/compliance frameworks
  • Ability to work cross-functionally with Infrastructure, Engineering, Security Operations, and Application teams
  • Strong communication, documentation, and stakeholder management skills
  • Hands-on technical expertise with the ability to balance strategic guidance and tactical execution
Preferred Certifications
CISSP, CCSP, CISM, GIAC Cloud Security, Azure Security Engineer, AWS Security Specialty, or equivalent cloud/security certifications preferred.

Candidates should reside in or near North Texas Or Durant, OK area OR within commuting distance from the following Texas cities:
  • Sherman, TX
  • Denison, TX
  • Tom Bean, TX
  • Anna, TX
  • Melissa, TX
  • Frisco, TX
  • McKinney, TX
  • Gainesville, TX
  • Howe, TX
Requirements: 
  • Able to work Hybrid onsite 2 days a week.
  • Must provide a valid Driver's License
  • Ability to work a 6 month - 12 month contract via W2  
#LI-AH1

About the Company

B

BravoTech

Resume Resources

Free Resume TemplatesFree Resume Builder