Senior Cloud Security Engineer

At IBM Software, we transform client challenges into solutions. Building the world's leading AI-powered, cloud-native products that shape the future of business and society. Our legacy of innovation creates endless opportunities for IBMers to learn, grow, and make an impact on a global scale. Working in Software means joining a team fueled by curiosity and collaboration. You'll work with diverse technologies, partners, and industries to design, develop, and deliver solutions that power digital transformation. With a culture that values innovation, growth, and continuous learning, IBM Software places you at the heart of IBM's product and technology landscape. Here, you'l have the tools and opportunities to advance your career while creating software that changes the world.

At HashiCorp, an IBM Company, we’re on a mission to enable organizations to provision, secure, connect, and run infrastructure for any application. Our Security Engineering team helps protect the cloud environments and services that support that mission.

We are looking for a senior Cloud Security Engineer with a strong software and infrastructure engineering background to design and build scalable security capabilities across our cloud environments. This role goes beyond identifying security issues: you will engineer preventative controls, automated guardrails, and secure-by-default patterns that enable engineering teams to move quickly while managing cloud risk.

· Lead the design and implementation of cloud security architecture and engineering solutions across AWS, Azure, GCP, and other cloud environments.

· Architect and build production-quality security tooling and automation using Go/Golang and Python, integrating security directly into infrastructure and engineering workflows.

· Design preventative security controls and automated guardrails using Terraform and Infrastructure as Code (IaC), enabling secure-by-default cloud deployments.

· Establish scalable security patterns across IAM, cloud networking, workload identity, containers/Kubernetes, secrets management, PKI, and workload protection.

· Design and integrate security controls into CI/CD pipelines, infrastructure provisioning, and developer workflows, shifting security earlier into the engineering lifecycle.

· Provide technical leadership for complex cloud security initiatives, independently driving solutions from architecture and design through implementation and operationalization.

· Identify systemic cloud security risks and translate them into reusable engineering patterns, automation, detections, and preventative controls rather than relying solely on manual remediation.

· Partner with platform, infrastructure, product, and security engineering teams to conduct architecture reviews and influence the design of secure cloud services.

· Improve CSPM/CNAPP, vulnerability management, detection, and cloud security monitoring capabilities and translate findings into engineering improvements.

· Research emerging cloud attack techniques and technologies and apply those insights to evolving cloud security architecture.

· Mentor engineers and provide technical direction on cloud security engineering, automation, and secure infrastructure design.

• Strong software engineering background, ideally in infrastructure, platform, cloud, or security engineering, with experience designing and operating production systems and building automation or tooling using Go/Golang or Python.
• Deep hands-on cloud security experience with AWS and/or Azure, including IAM, networking, compute/workloads, containers/Kubernetes, and cloud-native security controls.
• Strong Infrastructure as Code experience, preferably Terraform, designing reusable, secure infrastructure patterns and automated preventative security controls.
• Experience integrating security into CI/CD and engineering workflows, including Linux environments and automated security guardrails that enable secure-by-default deployments.
• Ability to lead complex cloud security initiatives across multiple engineering teams, effectively communicating architecture, security risks, and technical trade-offs to engineering and security stakeholders.

• Experience designing workload identity, OIDC federation, PKI, secrets management, and short-lived credential architectures.
• Experience building internal developer platforms, self-service infrastructure, paved roads, or automated security guardrails.
• Experience with Cloud Security Posture Management (CSPM) or CNAPP platforms, cloud vulnerability management, and security detection tooling; experience with Wiz is a plus.
• Experience architecting and securing infrastructure across AWS, Azure, and GCP, including developing consistent controls across multiple cloud providers.
• Experience with policy-as-code and preventative security controls integrated into Terraform and CI/CD workflows.
• Experience designing or operating security controls for Kubernetes and containerized workloads.
• Knowledge of Zero Trust architecture, cloud governance, and modern identity security principles.
• Understanding of compliance frameworks such as SOC 2, ISO 27001, and FedRAMP.

In a world where technology never stands still, we understand that, dedication to our clients success, innovation that matters, and trust and personal responsibility in all our relationships, lives in what we do as IBMers as we strive to be the catalyst that makes the world work better.

Being an IBMer means you’ll be able to learn and develop yourself and your career, you’ll be encouraged to be courageous and experiment everyday, all whilst having continuous trust and support in an environment where everyone can thrive whatever their personal or professional background.

Our IBMers are growth minded, always staying curious, open to feedback and learning new information and skills to constantly transform themselves and our company. They are trusted to provide on-going feedback to help other IBMers grow, as well as collaborate with colleagues keeping in mind a team focused approach to include different perspectives to drive exceptional outcomes for our customers. The courage our IBMers have to make critical decisions everyday is essential to IBM becoming the catalyst for progress, always embracing challenges with resources they have to hand, a can-do attitude and always striving for an outcome focused approach within everything that they do.

Are you ready to be an IBMer?

IBM’s greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.

Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we’re also one of the biggest technology and consulting employers, with many of the Fortune 500 companies relying on the IBM Cloud to run their business.

At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing and blockchain. Now it’s time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.

IBM is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, neurodivergence, age, or other characteristics protected by the applicable law. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

IBM offers a competitive and comprehensive benefits program. Eligible employees may have access to:

- Healthcare benefits including medical & prescription drug coverage, dental, vision, and mental health & well being

- Financial programs such as 401(k), cash balance pension plan, the IBM Employee Stock Purchase Plan, financial counseling, life insurance, short & long- term disability coverage, and opportunities for performance based salary incentive programs

- Generous paid time off including 12 holidays, minimum 56 hours sick time, 120 hours vacation, 12 weeks parental bonding leave in accordance with IBM Policy, and other Paid Care Leave programs. IBM also offers paid family leave benefits to eligible employees where required by applicable law

- Training and educational resources on our personalized, AI-driven learning platform where IBMers can grow skills and obtain industry-recognized certifications to achieve their career goals

- Diverse and inclusive employee resource groups, giving & volunteer opportunities, and discounts on retail products, services & experiences

We consider qualified applicants with criminal histories, consistent with applicable law.

This position was posted on the date cited in the key job details section and is anticipated to remain posted for 21 days from this date or less if not needed to fill the role.

IBM will not be providing visa sponsorship for this position now or in the future. Therefore, in order to be considered for this position, you must have the ability to work without a need for current or future visa sponsorship.

The compensation range and benefits for this position are based on a full-time schedule for a full calendar year. The salary will vary depending on your job-related skills, experience and location. Pay increment and frequency of pay will be in accordance with employment classification and applicable laws. For part time roles, your compensation and benefits will be adjusted to reflect your hours. Benefits may be pro-rated for those who start working during the calendar year.