Cloud Security Compliance Engineer

Title	Cloud Security Compliance Engineer
Department	Cloud Security / Security Engineering / Platform
Reports to	[Cloud Security Manager / Security Engineering Lead / CISO]
Location	[Remote / Hybrid / On-site]
Employment type	Full-time
Salary	[Salary range. Postings with a range perform significantly better, and several states require one.]

Position overview

The Cloud Security Compliance Engineer designs, implements, and automates the security controls that keep [Company]'s cloud environments compliant and audit-ready. This role sits at the intersection of security engineering and compliance, translating framework requirements into enforceable configuration, guardrails, and code.

Working with platform, DevOps, and security teams, the engineer implements controls, builds continuous monitoring, and produces the evidence auditors need. The role reduces manual compliance effort by embedding controls into the cloud fabric itself.

This is a hands-on engineering role for a security professional who can code, configure cloud platforms, and reason about frameworks and audit requirements.

Key responsibilities

Cloud control implementation

• Implement security controls across cloud accounts and services.
• Configure guardrails, policies, and secure baselines.
• Map framework requirements to technical cloud controls.
• Harden identity, network, data, and workload configurations.

Compliance as code and automation

Automate control enforcement and evidence collection so compliance keeps pace with cloud change.

• Build policy-as-code and infrastructure-as-code guardrails.
• Automate control checks and drift detection.
• Automate evidence collection for audits.
• Integrate controls into CI/CD pipelines.

Continuous monitoring and posture

Operate Cloud Security Posture Management (CSPM) and related tooling to monitor configuration, detect misconfiguration, and track remediation across environments.

Audit and certification readiness

• Maintain evidence for SOC 2, ISO 27001, and similar audits.
• Support FedRAMP or other regulated program requirements where applicable.
• Coordinate technical responses to auditor requests.
• Track and remediate control gaps.

Remediation and hardening

Drive remediation of misconfigurations and control gaps, and partner with engineering teams to harden environments against recognized benchmarks.

Collaboration and enablement

Provide secure patterns and guidance to development teams so compliant configuration is the default, not an afterthought.

Required qualifications

• Bachelor's degree in Computer Science, Information Security, or a related discipline, or equivalent experience.
• 4 to 8 years of experience in cloud security, security engineering, or DevSecOps.
• Hands-on experience with at least one major cloud platform.
• Experience with infrastructure-as-code, scripting, or automation.
• Working knowledge of security frameworks and audit requirements.
• Familiarity with CSPM and cloud-native security tooling.

Preferred certifications

One or more of: CCSP, CCSK, AWS Certified Security Specialty, CISSP, or equivalent cloud or security certification.

Technical knowledge

Cloud security architecture, security control implementation, compliance as code, infrastructure-as-code, CSPM and cloud-native tooling, continuous monitoring, evidence automation, CI/CD security, and framework mapping for SOC 2, ISO 27001, CIS Benchmarks, and FedRAMP.

Essential competencies

Engineering rigor, automation mindset, clear documentation, cross-team collaboration, and the ability to translate compliance requirements into technical controls.

About [Company]

[Two or three sentences about your organization, the maturity of your program, and what the first year looks like. Candidates in this field respond to honesty about whether they are joining a build or an established function.]