Cloud Security Principal Engineer (Philadelphia)

Assignment Details :

Title : Cloud Security Principal Engineer (CISSP)

Location : Philadelphia, PA 19104 (80% remote)

Duration : 6+ months contract

Pay rate : $85-$90 an hour

Job Description :

Hybrid - 80% remote, 20% onsite. Position is temp to perm. Please only submit candidates with CISSP certiications at this time. The manager is also priortizing candidates with cloud security certifications.

Summary :

The Cloud Security Engineer will play a pivotal role in the cloud security service delivery model. The role combines deep technical expertise, collaboration across internal and external teams to design, implement, and optimize cloud security controls and service lines. The candidate will support both project-based and continuous security initiatives, focusing on securing CHOPs cloud migration, supporting cloud security tool optimization, cloud security processes for the Information Security team, cloud / hybrid controls, automation, and risk-driven security outcomes.

Requirements :

• Proven experience in securing a multi-cloud environment.
• Proven experience with Identity and access management in the cloud
• Proven experience with all security service lines in a cloud envrionment and the supporting security tools and processes to be successful.
• Demonstrate collaboration with internal stakeholders, vendors, and supporting teams to design, implement, and maintain security technologies across network, endpoint, identity, and cloud infrastructure.
• Drive continuous improvement and coverage of cloud security controls by validating alerts, triaging escalations, and working with the MSP to fine-tune detection and prevention capabilities.
• Lead or support the development of incident response plans, engineering runbooks, tabletop exercises, and system hardening guides.
• Ensure alignment of security architectures with CHOPs policies, standards, and external frameworks such as NIST SP 800-53, HIPAA, PCI-DSS, CISA ZTMM, CIS Benchmarks, and Microsoft CAF Secure Methodology, AWS CAF, AWS Well Architected framework, Google CAF
• Participate in design and governance forums to provide security input into infrastructure, DevSecOps, and cloud-native application strategies.
• Assist with audits, compliance assessments, risk remediation plans, and evidence collection with internal compliance and external third-party stakeholders.
• Mentor and support junior InfoSec engineers through documentation, training, and peer reviews.
• Hands-on experience in security engineering, systems integration, and cloud architecture (Azure preferred).
• Proficiency in tools and domains such as : EDR (Microsoft Defender), SIEM (Sentinel or Splunk), CSPM (e.g., Wiz), IAM (Entra ID), VPNs / NGFWs, NAC, and encryption protocols.
• Demonstrated understanding of secure configuration management, automation pipelines (e.g., Terraform, PowerShell), and vulnerability management platforms.

What you will do

Skills : Duties (cont'd) :

Skills :

Information Security Requirements :

Education : Bachelor's Degree

Preferred :

Bachelor's Degree in Computer Science, Information Systems, or related field

Required Experience :

Preferred Experience :