Sr Cloud Security Engineer

Job highlights

• Experience standing up or maturing a PAM program from a fresh implementation .
• 36+ years in security engineering,with hands-on ownership of at least one PAM platform (CyberArk strongly preferred) in production .
• Working experience with a cloud SSE / ZTNA platform (Zscaler,Cloudflare Access,or similar) and a CDN / WAF .

Mission

• Own the identity, access, and network security control plane CyberArk, Zscaler and Cloudflare for a fast-scaling, AI-driven insurance infrastructure org. You'll take these tools from initial deployment handoff to steady, auditable, day-2 operations, and be the technical backbone the Security Lead relies on for privileged access and network security posture.

What you'll own

• CyberArk (PAM) safe/policy design, privileged account lifecycle, credential rotation monitoring, access recertification
• Zscaler (SSE) policy tuning, app onboarding, exception handling
• Cloudflare (WAF/CDN, and Zero Trust/Access if applicable) rule tuning, DNS, edge security posture
• Key responsibilities
• Take over day-2 administration of CyberArk from the implementation partner; ensure clean runbooks/SOPs exist and are maintained
• Run privileged access onboarding/offboarding and periodic access recertification, feeding evidence to the GRC Analyst for audit cycles
• Own Zscaler and Cloudflare policy baselines; manage exceptions without degrading security posture
• Partner with engineering teams as headcount scales to keep IAM and network controls usable, not just secure
• Support technical deep-dives requested by auditors or pen testers on identity/network architecture
• Identify opportunities to automate policy-drift detection and routine PAM/SSE administration, in line with the team's AI-driven, lean operating model
• Escalate control-design questions or audit findings on these tools to the Security Lead

What we're looking for

• 36+ years in security engineering, with hands-on ownership of at least one PAM platform (CyberArk strongly preferred) in production
• Working experience with a cloud SSE/ZTNA platform (Zscaler, Cloudflare Access, or similar) and a CDN/WAF
• Comfortable being the sole owner of high-scrutiny controls in an audited environment (SOC 2, ISO 27001, or similar)
• Strong scripting/automation ability (Python, Terraform, or similar) to keep a lean team's operational load sustainable
• Clear written communication you'll produce evidence and explanations auditors and pen testers can follow
• Nice to have
• Insurance, financial services, or other regulated-industry background
• Experience standing up or maturing a PAM program from a fresh implementation
• Exposure to NAIC Insurance Data Security Model Law or similar state insurance regulatory frameworks

How we'll know you're succeeding

• CyberArk, Zscaler, and Cloudflare pass audit control tests with minimal findings
• Privileged access recertification completed on schedule every cycle
• No unplanned production impact from policy changes across owned tools
• Routine administration increasingly automated rather than manual quarter over quarter

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.