Ardent Mills is committed to transforming how the world is nourished.
Cloud Security Engineer
Location
Colorado
Posted
1 day ago
Salary
$140K - $200K / year
Seniority
Senior
Job Description
Cloud Security Engineer
Ardent Mills
• Design, implement, and operate security controls primarily across Microsoft Azure environments • Lead design and implementation for cloud landing zones, identity, and network controls (VPC/VNet, security groups/NSGs, private endpoints) • Configure cloud-native security services (e.g., Microsoft Defender for Cloud, Microsoft Sentinel, Defender XDR) • Build posture management (CSPM) and workload protection (CWPP) with policy-as-code and automated remediation • Implement key management, encryption at rest/in transit, and certificate governance using KMS/Key Vault/Cloud KMS • Establish logging, telemetry, and alerting (Azure Monitor) integrated to SIEM/XDR • Work with key team members across IT and Security to test and validate total coverage / maturity of detection telemetry from cloud native sources • Determine architecture as needed to harden serverless containers and managed services (Functions, Logic Apps, Container Apps, AKS, ACI) • Perform threat modeling and security reviews for cloud architectures and application designs • Partner with platform and product teams to deliver IaC guardrails, image baselines, and patch/vulnerability workflows • Respond to cloud incidents as a point of escalation; perform triage, containment, and post-incident improvements • Develop automation architecture where applicable to optimize cloud detection and response capabilities • Leverage automation and AI-assisted capabilities where appropriate to enhance cloud detection and response • Document standards and runbooks; conduct enablement sessions with dev and ops teams • Design partner in cloud security strategy and program maturity
Job Requirements
- Bachelor’s in computer science/engineering or equivalent experience
- 4–7 years in cloud security engineering across at least one major CSP
- Strong knowledge of IAM, networking, encryption, and cloud-native security tooling
- Experience securing hybrid environments spanning on-premises and Azure cloud
- Scripting/automation expertise (Python/Bash/PowerShell; Terraform/Bicep/ARM)
- Certifications: CCSP; AWS Certified Security – Specialty, Azure Security Engineer Associate (AZ-500), or Google Professional Cloud Security Engineer
- Good to have: Experience with CIEM solutions and multi-cloud governance
- Certifications: GIAC Cloud (GCSA/GPCS), CNCF CKA/CKS, vendor pro-level architect certs
Benefits
- Medical, Dental and Vision Coverage
- Health and Dependent Savings Accounts
- Life and Disability Programs
- Voluntary Benefit Programs
- Company Sponsored Wellness Programs
- Retirement Savings with Company Match
- Team Member and Family Assistance Program (EAP)
- Paid Time Off and Paid Holidays
- Employee Recognition Program with Rewards (RAVE)
Related Guides
Related Categories
Related Job Pages
More Cloud Engineer Jobs
Infrastructure – Cloud Architecture
KyndrylKyndryl provides IT infrastructure services focused on designing, building, managing, and modernizing mission-critical technology systems. Founded in 2021 with
• Designs and guides cloud, Linux platform, container, and edge infrastructure architecture for a Kyndryl client’s software engineering and product platform environment. • Key responsibilities include designing cloud and platform architecture supporting engineering workloads, Linux platforms, containerized services, Kubernetes environments, DevOps pipelines, and product integration needs. • Collaborates with software, DevOps, testing, technical support, and delivery teams.
• Design, build, and maintain cloud-native backend services that support residential applications, device integrations, and platform capabilities. • Develop scalable APIs, asynchronous workflows, and service integrations using modern backend technologies. • Contribute to architecture decisions across microservices, event-driven systems, Kubernetes-based runtime environments, and cloud infrastructure. • Support and improve device-to-cloud flows involving AWS IoT Core and related platform services. • Improve reliability, scalability, observability, and operational readiness across the Infinity platform. • Partner with mobile, web, product, QA, and platform teams to enable high-quality end-to-end delivery. • Troubleshoot production issues, lead root-cause analysis, and help implement durable fixes and long-term remediation. • Contribute to CI/CD, infrastructure automation, release engineering, and secure software delivery practices. • Identify technical risks early and help shape implementation plans and proof-of-concepts for new capabilities.
• Write scalable and maintainable Javascript for AWS services (e.g. Lambda, Fargate) • Develop and help monitor RESTful APIs • Build efficient services for storing and processing structured data • Contribute to clean and organized infrastructure-as-code templates (e.g. CloudFormation) and help deploy stacks across environments • Help manage the security and organization of data in S3 • Contribute to the AWS side of integrations with our Salesforce platform, and help refactor Salesforce processes (LWC, Apex) as part of that work • Partner with senior engineers and Product Managers to scope and deliver features • Contribute to project documentation and knowledge bases
• Write scalable and maintainable Javascript for AWS services (e.g. Lambda, Fargate) • Design, develop and monitor RESTful APIs • Design cost effective and efficient services for storing and processing high volumes of structured data with thousands of records • Create clean and organized infrastructure-as-code templates (e.g. CloudFormation) and deploy stacks across environments • Manage the security and organization of data in S3 • Build the AWS side of integrations with our Salesforce platform, and refactor Salesforce processes (LWC, Apex) as part of that work • Work closely with Product Managers for scoping and roadmap discussions • Contribute to project documentation and knowledge bases
