Cloud Security Engineer

The National Association of Insurance Commissioners (NAIC) is seeking a Cloud Security Engineer to define, implement, and maintain security architecture for its cloud and cloud-native environments. The role partners with Cloud Engineering, DevOps, Compliance, and Risk teams to secure cloud platforms, Kubernetes workloads, and AI-enabled technologies while meeting regulatory requirements and organizational risk tolerance.

Responsibilities:

• Design, implement, and maintain secure cloud architectures across IaaS, PaaS, and SaaS platforms (e.g., AWS, Azure, OCI), including security guardrails and standards
• Develop and maintain cloud security standards and documentation and ensure cloud architecture designs align with said standards and risk management requirements
• Lead security architecture and controls for containerized and Kubernetes-based workloads, including cluster hardening and secure configuration, workload isolation and network policies, secrets management and key rotation, and container image security and supply chain integrity
• Collaborate with DevOps teams on container security tooling, runtime protection, and secure CI/CD pipelines
• Contribute to the development and architecture of an organizational AI security strategy, including governance, acceptable use, and risk controls
• Translate regulatory and compliance requirements (e.g., SOC 2, NIST, ISO 27001, GovRAMP) into actionable cloud security controls
• Evaluate and implement cloud security posture management (CSPM), container security, CI/CD security, and cloud-native security tools

Requirements:

• This is a full-time remote position. Residency within a 100-mile radius of the Kansas City office is required
• Bachelor's degree (B.A. or B.S.) from four-year College or university in a computer related field and 5+ years of experience in information security, with significant focus on cloud environments, and/or equivalent combination of education and technical experience
• Hands-on experience securing AWS (Azure and OCI experience are a plus)
• Practical experience securing Kubernetes and containerized workloads
• Familiarity with infrastructure-as-code and CI/CD security concepts
• Strong working knowledge of:
• Cloud IAM and identity federation
• Network security (VPCs/VNETs, firewalls, security groups)
• Encryption, key management, and secrets handling
• Ability to communicate complex security concepts clearly to technical and non-technical audiences
• AWS
• Kubernetes & Container Technologies
• Infrastructure-as-code tools (e.g., Terraform, CloudFormation, ARM, Gitlab)
• Windows, Linux, and MacOS Endpoints
• Identity & Access Management (IAM / IdP)
• Applicants must be authorized to work for any employer in the U.S
• Experience working in regulated or compliance-driven environments (e.g., SOC 2, GovRAMP, PCI, HIPAA)
• Familiarity with frameworks such as NIST 800-53, CIS Benchmarks, or Zero Trust architectures
• Experience evaluating or securing AI/ML platforms or SaaS tools
• Experience with CSPM, container security, or cloud-native security tools (vendor-agnostic)
• Relevant certifications (e.g., AWS Security Specialty, CCSK, CKS, CISSP) are a plus