• Job Purpose and Impact

• The Cloud Security Engineer will support and strengthen the security foundation for Cargill's modern cloud-based applications and platforms. In this role, you will apply hands-on cloud engineering and cybersecurity skills to secure and operate **Infrastructure as a Service (IaaS)**and Platform as a Service (PaaS) environments across AWS and Azure. You will work closely with application, platform, and DevOps teams to embed security into cloud deployments and contribute to scalable, automated security solutions.

• Key Accountabilities

• Implement and support security controls and resiliency mechanisms for enterprise cloud services

• Configure, manage, and operate cloud security solutions across AWS and Azure, including CSPM platforms such as Wiz

• Use Wiz Cloud to monitor cloud posture, identify misconfigurations, and prioritize risks based on exposure context

• Partner with application and platform teams to remediate Wiz findings and reduce repeat security issues

• Automate security controls, policies, and workflows using Infrastructure as Code (Terraform) and scripting

• Collaborate with DevOps, Cloud Platform, Software Engineering, and Compliance teams to integrate security into CI/CD pipelines and cloud deployments

• Support cloud security incident response, including investigation, remediation, and post-incident analysis

• Contribute to security design reviews and share knowledge with peers and junior engineers

Qualifications:

• Required Qualifications Bachelor's degree in a related field or equivalent hands-on experience

• 4-8 years of experience in cloud engineering and/or cloud security roles

• Hands-on experience with AWS and/or Azure cloud services

• Experience implementing cloud security capabilities such as IAM, logging, monitoring, encryption, and network security

• Practical experience using cloud security platforms such as Wiz (CSPM, exposure analysis, remediation workflows)

• Experience with AWS networking and security constructs (security groups, routing, firewalls)

• Hands-on experience with containers and container platforms (Kubernetes, EKS, ECS, Docker)

• Working knowledge of Infrastructure as Code using Terraform or similar tools

• Scripting experience using Python, Golang, or PowerShell

• Familiarity with DevOps and CI/CD practices, including integrating security into pipelines

• Ability to analyze logs, metrics, and security findings to support remediation and continuous improvement

• Preferred Qualifications

• Cloud certifications (AWS, Azure, and/or Google Cloud)

• Security certifications such as CCSP, CEH, GSEC, or similar

• Experience supporting cloud migrations and securing workloads at scale

• Exposure to Wiz or runtime security concepts is a plus

#Standard