Position Details
W Cloud Security Principal Engineer Cissp Apply
Cloud Security Principal Engineer CISSP Certification required
Type: Contract to hire
Length: 6+ months (extensions expected)
Location: Philadelphia, PA Hybrid 80% remote, 20% onsite
Required Skills & Experience
- Certifications: CISSP (mandatory); cloud security certifications strongly preferred
- Education: Bachelor's Degree (Computer Science, Information Systems, or related field preferred)
Experience:
- 12+ years industry experience across IT disciplines (architecture, network, application, database, operations)
- 6+ years in information security, regulatory compliance, and risk management
- 3+ years in Identity & Access Management (IAM), Role-Based Access Control (RBAC), user provisioning, or security awareness training
- Experience with cloud and/or virtualization technologies
Technical Expertise:
- Multi-cloud security (Azure preferred; AWS, Google Cloud also relevant)
- Identity & Access Management (IAM/Entra ID)
- Security tools: EDR (Microsoft Defender), SIEM (Sentinel/Splunk), CSPM (e.g., Wiz), VPNs/NGFWs, NAC, encryption protocols
- Secure configuration management, automation pipelines (Terraform, PowerShell), vulnerability management platforms
- Networking protocols (TCP/IP, WAN/LAN, firewalls, IPS, web filtering, disk encryption)
- Microsoft Active Directory, UNIX; ERP/clinical systems (Epic, Lawson) a plus
Frameworks & Compliance:
- NIST SP 800-53, HIPAA, PCI-DSS, CISA ZTMM, CIS Benchmarks, ISO 27000, Microsoft CAF, AWS CAF/Well-Architected, Google CAF
Other Skills:
- Risk management frameworks
- SDLC methodologies, PMO project management, MS productivity tools (Access, Word, PowerPoint, Visio, Project)
- Database query/data mining basics
- Strong knowledge of InfoSec principles, IT controls, and regulatory standards
Preferred Skills & Experience
- 3+ years working with matrixed, high-performance teams
- ERP and clinical application security experience
- Strong mentoring and leadership capabilities
Key Responsibilities
- Serve as subject matter expert and advisor on complex cloud security issues
- Design, implement, and optimize cloud security controls and service lines
- Support cloud migration, tool optimization, automation, and risk-driven outcomes
- Collaborate with internal stakeholders, vendors, and MSPs to fine-tune detection/prevention capabilities
- Lead incident response planning, runbooks, tabletop exercises, and system hardening guides
- Align security architectures with organizational policies and external frameworks
- Participate in governance forums, DevSecOps, and cloud-native strategies
- Assist with audits, compliance assessments, and risk remediation plans
- Mentor junior InfoSec engineers through documentation, training, and peer reviews
- Shape and design service lines, manage risks, and ensure enterprise solutions are scalable and adaptable
- Support business continuity, change management, and educate management on IAM and RBAC models
