Senior Technical Consultant - Cloud Security

As a Senior Technical Consultant, you will provide expert guidance across cloud security architecture, risk strategy, governance, and compliance for complex enterprise environments.
You will support client engagements from strategy and planning through implementation, helping organizations build secure and scalable cloud foundations.
The role combines hands-on technical expertise with consulting, client engagement, business development, and practice development responsibilities.
You will work across AWS, Azure, and GCP environments, applying modern security controls, automation, Infrastructure-as-Code, and container security practices.
You will also leverage leading CNAPP platforms such as Wiz and Prisma Cloud to identify risks and drive effective remediation.
Beyond client delivery, you will contribute thought leadership, service development, mentorship, and continuous improvement of security capabilities.
This is a client-facing opportunity for an experienced security professional who can translate complex technical risks into practical business outcomes.

• Extensive professional experience in information security, security governance, compliance, cloud security, or a related technical consulting discipline.
• Proven experience reviewing and implementing secure cloud reference architectures and landing zones.
• Ability to translate traditional risk strategies, including lift-and-shift approaches, into effective cloud-native security controls.
• Strong understanding of multi-cloud governance models, including Infrastructure-as-Code (IaC), policy-as-code (PaC), tagging standards, and multi-account strategies.
• 5+ years of hands-on experience with CNAPP platforms, particularly Wiz and Prisma Cloud.
• Proven ability to deploy and implement Prisma Cloud in enterprise environments and integrate Wiz or Prisma Cloud with ServiceNow, CI/CD pipelines, ticketing systems, and alerting workflows.
• Ability to clearly communicate CNAPP findings, including risk, criticality, and remediation recommendations, to both technical and business stakeholders.
• 5+ years of experience working with AWS, Azure, and/or GCP.
• Familiarity with cloud-native security services such as AWS Security Hub, Microsoft Defender for Cloud, and Google Security Command Center.
• Hands-on experience with cloud identity and access management, including IAM, federation, and RBAC across multi-cloud environments.
• Familiarity with identity-as-a-service platforms such as Okta and Entra ID.
• Strong knowledge of security standards and frameworks including CIS Benchmarks, NIST, FedRAMP, ISO 27001, and GDPR.
• Experience designing and mapping cloud-specific security controls for audit and compliance requirements.
• Experience integrating security monitoring with SIEM platforms such as Splunk, Sentinel, or Chronicle and using cloud-native detection capabilities.
• Ability to read, understand, and apply Infrastructure-as-Code using Terraform, Bicep, and/or CloudFormation.
• Familiarity with policy-as-code tools such as OPA and Sentinel, as well as IaC scanning within CI/CD pipelines.
• Proficiency in scripting with Python, PowerShell, and/or Bash to automate security tasks and workflows.
• Experience with Docker, Kubernetes, and securing containerized workloads at scale.
• Strong consulting, communication, problem-solving, and stakeholder management skills, with the ability to operate effectively across technical and business audiences.