Cloud Security Engineer

Job Summary

TXDOT is seeking an experienced Cloud Security Engineer to join the Tools Team. The selected candidate will be responsible for designing, implementing, and maintaining security controls across multi-cloud environments including Google Cloud Platform (GCP), AWS, Azure, and Oracle Cloud.

The ideal candidate will have strong hands-on experience in cloud engineering, cloud security monitoring, risk management, and DevSecOps practices. This role will focus on ensuring the confidentiality, integrity, and availability of cloud-hosted applications, infrastructure, and data while maintaining compliance with internal and external security standards.

Key Responsibilities

• Design, implement, and manage cloud security solutions across GCP, AWS, Azure, and Oracle environments
• Maintain and support Cloud Security Monitoring tools such as Wiz
• Develop and implement automated security controls and guardrails within GCP environments
• Perform risk assessments, vulnerability management, and incident response activities
• Ensure compliance with security policies, standards, and regulatory requirements through continuous monitoring and remediation
• Collaborate with engineering and operations teams to strengthen cloud security posture
• Support DevSecOps initiatives, container security, and automated policy enforcement

Required Skills & Qualifications

• 8+ years of experience designing and managing cloud solutions across Google Cloud, AWS, or Azure
• Strong experience in cloud engineering and cloud configuration
• 8+ years of hands-on experience in:
  • Risk assessments
  • Vulnerability management
  • Incident response
  • Cloud architecture
  • Cybersecurity fundamentals
  • Container security
  • DevSecOps
• Experience with Cloud Security Monitoring tools such as:
  • Wiz
  • Microsoft Defender for Cloud
  • Tenable Cloud Security
• Strong communication, documentation, and reporting skills

Preferred Qualifications

• Google Professional Cloud Security Engineer Certification
• Experience with:
  • Cloud KMS
  • Cloud Armor
  • Security Command Center (SCC)
  • Google Kubernetes Engine (GKE)
  • Data Loss Prevention (DLP)
  • Chronicle
• Familiarity with automated policy enforcement and advanced DevSecOps practices