Cloud Security Principal Engineer

Cloud Security Principal Engineer – CISSP Certification required - Job Req # # 36663065

Type: Contract to hire

Length: 6+ months (extensions expected)

Location: Philadelphia, PA – Hybrid 80% remote, 20% onsite

Required Skills & Experience

Certifications: CISSP (mandatory); cloud security certifications strongly preferred

Education: Bachelor's Degree (Computer Science, Information Systems, or related field preferred)

Experience:

12+ years industry experience across IT disciplines (architecture, network, application, database, operations)

6+ years in information security, regulatory compliance, and risk management

3+ years in Identity & Access Management (IAM), Role-Based Access Control (RBAC), user provisioning, or security awareness training

Experience with cloud and/or virtualization technologies

Technical Expertise:

Multi-cloud security (Azure preferred; AWS, Google Cloud also relevant)

Identity & Access Management (IAM/Entra ID)

Security tools: EDR (Microsoft Defender), SIEM (Sentinel/Splunk), CSPM (e.g., Wiz), VPNs/NGFWs, NAC, encryption protocols

Secure configuration management, automation pipelines (Terraform, PowerShell), vulnerability management platforms

Networking protocols (TCP/IP, WAN/LAN, firewalls, IPS, web filtering, disk encryption)

Microsoft Active Directory, UNIX; ERP/clinical systems (Epic, Lawson) a plus

Frameworks & Compliance:

NIST SP 800-53, HIPAA, PCI-DSS, CISA ZTMM, CIS Benchmarks, ISO 27000, Microsoft CAF, AWS CAF/Well-Architected, Google CAF

Other Skills:

Risk management frameworks

SDLC methodologies, PMO project management, MS productivity tools (Access, Word, PowerPoint, Visio, Project)

Database query/data mining basics

Strong knowledge of InfoSec principles, IT controls, and regulatory standards

Preferred Skills & Experience

3+ years working with matrixed, high-performance teams

ERP and clinical application security experience

Strong mentoring and leadership capabilities

Key Responsibilities

Serve as subject matter expert and advisor on complex cloud security issues

Design, implement, and optimize cloud security controls and service lines

Support cloud migration, tool optimization, automation, and risk-driven outcomes

Collaborate with internal stakeholders, vendors, and MSPs to fine-tune detection/prevention capabilities

Lead incident response planning, runbooks, tabletop exercises, and system hardening guides

Align security architectures with organizational policies and external frameworks

Participate in governance forums, DevSecOps, and cloud-native strategies

Assist with audits, compliance assessments, and risk remediation plans

Mentor junior InfoSec engineers through documentation, training, and peer reviews

Shape and design service lines, manage risks, and ensure enterprise solutions are scalable and adaptable

Support business continuity, change management, and educate management on IAM and RBAC models