Cloud Security Engineer

About Workstreet

At Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

The Opportunity

We are seeking an experienced Cloud Security Engineer with deep, hands-on Oracle Cloud Infrastructure (OCI) expertise to help clients design, implement, and maintain secure OCI environments that meet stringent security and compliance requirements.

The ideal candidate has extensive experience securing OCI services, including Compute, Networking, Storage, Identity and Access Management (IAM), Security Zones, Cloud Guard, Vault, Logging, and related OCI security services. Experience with AWS, Azure, or GCP is considered beneficial but is secondary to demonstrated OCI expertise.

You will work closely with clients and internal engineering teams to strengthen cloud security, implement security automation, and ensure compliance across enterprise cloud environments, with OCI serving as the primary cloud platform.

This is an OCI-first role. Candidates must have strong, real-world experience designing, securing, and operating Oracle Cloud Infrastructure (OCI). Experience with OCI is a strict, non-negotiable requirement. Applicants without substantial OCI experience will not be considered.

What You'll Do

• Design and Implement Cloud Security Controls: Design, implement, and maintain security controls and best practices across Oracle Cloud Infrastructure (OCI), AWS, Google Cloud Platform (GCP), and Microsoft Azure, ensuring secure configurations, compliance with regulatory requirements, and alignment with industry security standards and best practices.
• Assess Cloud Environments: Assess Oracle Cloud Infrastructure (OCI) and multi-cloud environments (AWS, Google Cloud Platform (GCP), and Microsoft Azure) to identify security risks, misconfigurations, excessive permissions, network exposure, vulnerabilities, and compliance gaps, delivering actionable remediation recommendations to strengthen cloud security posture.
• Deploy and Manage Security Tools: Configure and maintain SIEM, IDS/IPS, vulnerability management, and identity solutions to strengthen cloud security posture.
• Support Compliance Initiatives: Support compliance initiatives across Oracle Cloud Infrastructure (OCI), AWS, Google Cloud Platform (GCP), and Microsoft Azure by implementing, validating, and testing security controls, and coordinating evidence collection to meet SOC 2, ISO 27001, HIPAA, and other regulatory and compliance requirements, with a primary focus on OCI environments.
• Automate Security Operations: Automate cloud security operations across Oracle Cloud Infrastructure (OCI), AWS, Google Cloud Platform (GCP), and Microsoft Azure by developing and managing Infrastructure-as-Code (IaC) solutions using Terraform and scripting languages to standardize secure deployments, enforce security policies, and strengthen cloud governance, with a primary focus on OCI environments.
• Conduct Cloud Security Reviews: Perform architecture assessments and configuration reviews to ensure secure design and adherence to best practices.
• Collaborate with Engineering Teams: Integrate security practices into CI/CD pipelines and development workflows to prevent vulnerabilities early in the lifecycle.
• Assist in Incident Response: Investigate and remediate cloud-related security incidents to minimize exposure and restore integrity.
• Communicate with Clients: Engage directly with clients via multiple channels to address security inquiries and deliver actionable guidance.

Client Relationship Management (Primary Focus)

• Own the Client Experience: Act as the primary point of contact for a portfolio of cloud security clients, building strong, trust-based relationships and ensuring consistent, high-quality engagement throughout all phases of service delivery.
• Guide Clients Through Cloud Security Initiatives: Lead clients through security improvement efforts — from initial assessments to implementation and ongoing optimization — with clear communication, defined milestones, and proactive support.
• Collaborate Closely with Client Teams: Partner with engineering, DevOps, and IT stakeholders to understand their cloud environments, address security gaps, and implement scalable, compliant solutions tailored to their infrastructure.
• Translate Security into Business Value: Communicate technical findings, risks, and recommendations in a clear, actionable manner that aligns with client priorities, compliance requirements, and operational goals.
• Manage Client Communications Proactively: Provide regular updates on project status, risks, and remediation progress, ensuring transparency and alignment across all stakeholders.
• Handle Escalations with Confidence: Address client concerns, incidents, and complex challenges with urgency and professionalism, delivering thoughtful, solution-oriented outcomes that maintain trust.
• Serve as a Trusted Cloud Security Advisor: Offer ongoing guidance on cloud security best practices, emerging threats, and compliance frameworks (e.g., SOC 2, ISO 27001, HIPAA), helping clients strengthen their long-term security posture.
• Drive Long-Term Client Success: Identify opportunities to enhance client environments through improved security architecture, automation, and process maturity, contributing to sustained value and partnership growth.

Who You Are

• Hands-on experience securing cloud environments across Oracle Cloud Infrastructure (OCI), AWS, Google Cloud Platform (GCP), and Microsoft Azure, with strong expertise in OCI security architecture and services, including compute, networking, storage, and Identity and Access Management (IAM). Proven ability to implement and manage security controls across cloud platforms while applying industry best practices to protect workloads, infrastructure, and data.
• Demonstrated expertise in Oracle Cloud Infrastructure (OCI) security services, including Compute, Networking, Storage, Identity and Access Management (IAM), Security Zones, Cloud Guard, Vault, Logging, Monitoring, and other OCI-native capabilities, with a strong understanding of cloud security principles, identity governance, network security, and compliance controls.
• Proficiency in security automation using tools like Terraform, AWS CloudFormation, Python, or Bash.
• Working knowledge of compliance frameworks such as SOC 2, ISO 27001, GDPR, or HIPAA.
• Experience with Microsoft security and identity ecosystem, including Azure, Microsoft Entra (Azure AD), EDR, MDM, and VDI environments.
• Excellent troubleshooting and problem-solving abilities.
• Strong written and verbal communication skills in English.
• Ability to manage multiple client projects and interact directly with US-based clients.

Nice to Have

• Experience with SIEM, IDS/IPS, vulnerability management, and log analysis tools.
• Relevant cloud security certifications (e.g., AWS Certified Security – Specialty, GCP Security Engineer, CISSP, CISM, or CISA).
• Familiarity with container security (Docker, Kubernetes) and DevSecOps practices.
• Understanding of Zero Trust and identity-centric security models.
• Prior experience working in a fast-paced startup or managed security environment.

What We Offer

• Career Development: Clear path with mentorship and training opportunities
• Technical Training: Comprehensive onboarding on security and compliance frameworks
• Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
• Growth Opportunity: Early-stage company with significant room for career advancement.
• Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

Work Environment Requirements

• Reliable high-speed internet connection.
• Quiet, professional home office setup.
• Must be amenable to working US Eastern Time zone hours.
• Fluency in written and verbal English communication skills.

Important Note for Applicants

Oracle Cloud Infrastructure (OCI) expertise is a mandatory requirement for this position. This is not a general cloud security role. Candidates must have substantial, hands-on experience securing and operating Oracle Cloud Infrastructure (OCI) in production environments. Experience limited to AWS, Azure, or GCP without significant OCI experience will not meet the requirements for this role.

Workstreet Is An Equal Opportunity Employer

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.

Employment with Workstreet is contingent upon the successful completion of a background check, which may include verification of employment history, education, and other relevant information, in compliance with applicable laws.

The Opportunity

We are seeking a Cloud Security Engineer with Oracle Cloud Infrastructure (OCI), including compute, networking, storage, and IAM experience, to help clients design, implement, and maintain security controls that meet compliance and security requirements. This role is ideal for professionals with hands-on experience in cloud security engineering, compliance frameworks, and cloud-based security best practices. You’ll work closely with clients and internal teams to strengthen their cloud security posture and automate security operations across AWS, GCP, and Azure environments.

What You'll Do

• Implement Cloud Security Controls: Apply and maintain security best practices across AWS, GCP, and Azure to ensure alignment with compliance and regulatory standards.
• Assess Cloud Environments: Evaluate client infrastructures to identify security risks, misconfigurations, and vulnerabilities, providing targeted remediation recommendations.
• Deploy and Manage Security Tools: Configure and maintain SIEM, IDS/IPS, vulnerability management, and identity solutions to strengthen cloud security posture.
• Support Compliance Initiatives: Contribute to SOC 2, ISO 27001, and HIPAA efforts through control implementation, testing, and evidence validation.
• Automate Security Operations: Develop and manage infrastructure-as-code (IaC) scripts to streamline and enforce consistent cloud security controls.
• Conduct Cloud Security Reviews: Perform architecture assessments and configuration reviews to ensure secure design and adherence to best practices.
• Collaborate with Engineering Teams: Integrate security practices into CI/CD pipelines and development workflows to prevent vulnerabilities early in the lifecycle.
• Assist in Incident Response: Investigate and remediate cloud-related security incidents to minimize exposure and restore integrity.
• Communicate with Clients: Engage directly with clients via multiple channels to address security inquiries and deliver actionable guidance.

Client Relationship Management (Primary Focus)

• Own the Client Experience: Act as the primary point of contact for a portfolio of cloud security clients, building strong, trust-based relationships and ensuring consistent, high-quality engagement throughout all phases of service delivery.
• Guide Clients Through Cloud Security Initiatives: Lead clients through security improvement efforts — from initial assessments to implementation and ongoing optimization — with clear communication, defined milestones, and proactive support.
• Collaborate Closely with Client Teams: Partner with engineering, DevOps, and IT stakeholders to understand their cloud environments, address security gaps, and implement scalable, compliant solutions tailored to their infrastructure.
• Translate Security into Business Value: Communicate technical findings, risks, and recommendations in a clear, actionable manner that aligns with client priorities, compliance requirements, and operational goals.
• Manage Client Communications Proactively: Provide regular updates on project status, risks, and remediation progress, ensuring transparency and alignment across all stakeholders.
• Handle Escalations with Confidence: Address client concerns, incidents, and complex challenges with urgency and professionalism, delivering thoughtful, solution-oriented outcomes that maintain trust.
• Serve as a Trusted Cloud Security Advisor: Offer ongoing guidance on cloud security best practices, emerging threats, and compliance frameworks (e.g., SOC 2, ISO 27001, HIPAA), helping clients strengthen their long-term security posture.
• Drive Long-Term Client Success: Identify opportunities to enhance client environments through improved security architecture, automation, and process maturity, contributing to sustained value and partnership growth.

Who You Are

• Hands-on experience securing AWS, GCP, or Azure environments.
• Must have hands-on experience with Oracle Cloud Infrastructure (OCI), including compute, networking, storage, and IAM
• Strong understanding of cloud security principles, IAM, network security, and compliance controls.
• Proficiency in security automation using tools like Terraform, AWS CloudFormation, Python, or Bash.
• Working knowledge of compliance frameworks such as SOC 2, ISO 27001, GDPR, or HIPAA.
• Experience with Microsoft security and identity ecosystem, including Azure, Microsoft Entra (Azure AD), EDR, MDM, and VDI environments.
• Excellent troubleshooting and problem-solving abilities.
• Strong written and verbal communication skills in English.
• Ability to manage multiple client projects and interact directly with US-based clients.

Nice to Have

• Experience with SIEM, IDS/IPS, vulnerability management, and log analysis tools.
• Relevant cloud security certifications (e.g., AWS Certified Security – Specialty, GCP Security Engineer, CISSP, CISM, or CISA).
• Familiarity with container security (Docker, Kubernetes) and DevSecOps practices.
• Understanding of Zero Trust and identity-centric security models.
• Prior experience working in a fast-paced startup or managed security environment.

What We Offer

• Career Development: Clear path with mentorship and training opportunities
• Technical Training: Comprehensive onboarding on security and compliance frameworks
• Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
• Growth Opportunity: Early-stage company with significant room for career advancement.
• Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

Work Environment Requirements

• Reliable high-speed internet connection.
• Quiet, professional home office setup.
• Must be amenable to working US Eastern Time zone hours.
• Fluency in written and verbal English communication skills.

Workstreet Is An Equal Opportunity Employer

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.

Employment with Workstreet is contingent upon the successful completion of a background check, which may include verification of employment history, education, and other relevant information, in compliance with applicable laws.

Originally posted on Himalayas