Senior Cloud Security Engineer (Zero Trust)

Contract Details
Work Mode: Onsite (100%)
Location: Dover, DE
Schedule: 37 hours/week, Day shift, approximately 8:00 AM 4:30 PM ET
Duration: 08/17/2026 06/30/2027
Interview Process: Virtual via Microsoft Teams

About the Opportunity
Join a security engineering team to lead Zero Trust and cloud security initiatives across multi-cloud environments. This role focuses on architecting, implementing, and operating ZTNA solutions and cloud-native security controls, with a strong preference for experience in Google Cloud Platform alongside AWS and Azure.

Key Responsibilities

• Design, implement, and operate Zero Trust Network Access (ZTNA) solutions; guide migration from traditional VPNs to ZTNA.
• Engineer secure architectures across GCP, AWS, and Azure using cloud-native security services, CSPM, and best practices.
• Implement IAM and access controls (least privilege, federation, SSO); integrate with enterprise identity platforms.
• Automate security processes using Python and infrastructure-as-code (Terraform, CloudFormation, ARM).
• Monitor and analyze security events (SIEM); support EDR/XDR, threat hunting, and incident response.
• Implement and enforce security policy, compliance, and governance (e.g., NIST, ISO, SOC 2, FedRAMP).
• Configure DLP and data classification; harden data protections across cloud workloads.
• Harden network security: firewalls, IDS/IPS, segmentation, VPNs, routing/switching, NAC, DNS security, load balancers, WAF; perform traffic analysis with tools such as Wireshark/tcpdump.
• Mentor junior engineers and clearly communicate complex security topics to varied audiences.

Required Qualifications

• 7+ years of information security experience with a strong focus on cloud security and Zero Trust.
• Hands-on ZTNA engineering and automation; familiarity with NIST 800-207 Zero Trust Architecture.
• Multi-cloud security expertise (GCP preferred) plus AWS and/or Azure; cloud-native security controls and CSPM.
• IAM/SSO implementation experience; Okta exposure preferred.
• Security automation experience: Python and IaC tools (Terraform, CloudFormation, Azure Resource Manager).
• SIEM log analysis, EDR/XDR concepts, and incident response experience.
• Knowledge of compliance frameworks (NIST, ISO, SOC 2; FedRAMP exposure).
• Data classification and DLP configuration experience.
• Deep network security background including firewalls, IDS/IPS, segmentation, VPNs, and traffic analysis.

Preferred Qualifications

• Direct experience with ZTNA platforms (e.g., Zscaler).
• Bachelor s or Master s in Computer Science, Information Security, or related field.
• Relevant certifications: CISSP, CCSP, AWS Security Specialty, Google Cloud Professional Cloud Security Engineer, Microsoft Azure Security Engineer Associate.
• Demonstrated leadership and mentoring experience; strong communication skills.

Work Environment

• Onsite role with no travel required.
• Security/background screening may be required.