NomadDesk

Cloud Security Engineer Expert

Company Description

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realize their financial goals and help them save time and money.

We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.

We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.

Description

Job description

The Cloud Security Engineer Expert is responsible for designing, implementing, and advancing security controls across multi-cloud environments, with deep expertise in AWS, Azure, and GCP. This role focuses on building secure architecture, identifying risks, and ensuring adoption of best practices for identity, access, and privileged account management in the cloud. While PAM expertise (e.g., CyberArk) is a plus, the primary emphasis is on strong cloud security experience to partner with business Cloud SMEs, shape security roadmaps, and drive adoption of enterprise cloud security standards.

Key Responsibilities

Cloud Security Architecture & Implementation

• Design, implement, and maintain security controls for multi-cloud environments (AWS, Azure, GCP) with special focus on PAM capabilities.
• Define and enforce secure configurations for cloud-native services (compute, storage, networking, databases, containers, serverless around human and non-human identities.
• Collaborate with enterprise and business Cloud SMEs to align security requirements with business and technology roadmaps.
• Integrate cloud security with enterprise IAM and PAM solutions, ensuring consistent enforcement of least-privilege access using moder concepts such JIT, Zero standing privileges.

• Assess cloud environments for security gaps, risks, and misconfigurations; provide remediation guidance.
• Ensure security controls align with regulatory and compliance frameworks (e.g., SOX, PCI-DSS, GDPR, HIPAA, ISO 27001, NIST).

• Contribute with the design and implementation of cloud IAM policies in alignment with industry best practices access across AWS, Azure, and GCP.
• Partner with PAM engineers to extend privileged access controls to cloud-native services (integration with CyberArk or equivalent).
• Support secret management strategies for application-to-application and DevOps use cases.

• Contribute to the cloud security roadmap, ensuring alignment with enterprise objectives and regulatory requirements.
• Evaluate emerging cloud security technologies, making recommendations for adoption.
• Act as a technical SME in cloud security discussions with business and technical stakeholders.

• • 8+ years of experience in cybersecurity, with at least 5+ years specializing in cloud security engineering and architecture. • Extensive hands-on experience with AWS, Azure, and GCP security controls, including IAM, networking, key management, logging/monitoring, and workload protection. • Strong knowledge of cloud security frameworks and best practices (e.g., CIS Benchmarks, NIST CSF, CSA CCM). • Experience in designing and enforcing IAM/PAM controls in cloud environments; CyberArk knowledge is a plus. • Strong background in secret management, DevOps integration, and automation (Terraform, Ansible, Python, CI/CD pipelines). • Demonstrated ability to engage with business Cloud SMEs to translate security requirements into practical solutions. • Deep security knowledge covering core technology infrastructure (network, storage, servers, databases, etc.), identity management, and application security practices • Excellent risk assessment, problem-solving, and communication skills. • Cloud security certifications such as AWS Certified Security, Azure Security Engineer Associate, Google Cloud Professional Cloud Security Engineer are highly desirable. • Broader security certifications such as CISSP, CCSP, CISM, GIAC are a strong plus.