{"id":2555811,"url":"https://alion.io/job/teamtag-senior-cloud-security-engineer","title":"Senior Cloud Security Engineer","company":{"id":2231267,"name":"Teamtag","domain":"teamtag.com","url":"https://alion.io/company/teamtag-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":160000,"max":185000,"currency":"USD","period":"year","gross":null,"usd_annual":185000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"ETL/ELT","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"ITIL","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-05T00:00:00Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-14T23:39:01Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"The Aspen Group (TAG) is one of the largest and most trusted retail healthcare business support organizations in the U.S. and has supported over 20,000 healthcare professionals and team members with close to 1,500 health and wellness offices across 48 states in four distinct categories: dental care, urgent care, medical aesthetics, and animal health. Working in partnership with independent practice owners and clinicians, the team is united by a single purpose: to prove that healthcare can be better and smarter for everyone. TAG provides a comprehensive suite of centralized business support services that power the impact of five consumer-facing businesses: Aspen Dental, ClearChoice Dental Implant Centers, WellNow Urgent Care, Chapter Aesthetic Studio, and Lovet. Each brand has access to a deep community of experts, tools and resources to grow their practices, and an unwavering commitment to delivering high-quality consumer healthcare experiences at scale.\nJob Description:\nThe Senior Cloud Security Engineer architects, deploys and operates a secure cloud application infrastructure that aligns with business needs. The position owns the technical direction of cloud security controls and sets the standards that product and engineering teams build against. The senior cloud security engineer is expected to resolve ambiguous problems independently, act as the senior technical escalation point for cloud security, and raise the technical bar of the team. The role requires depth across disparate applications and data systems, along with ownership of policy design, guardrail engineering and ongoing maintenance.\nThis is a single, dedicated cloud security function serving a multi-brand business. The engineer works across multiple brands and business units, each with its own cloud footprint and maturity level, and is responsible for bringing consistent security across all of them.\nActing as a technical peer to security leadership, the senior cloud security engineer drives assessment of the cloud threat landscape and translates it into a prioritized control roadmap. The role is highly technical and requires at least 7 years of experience in security and systems administration across a wide variety of cloud infrastructure, including software as a service (SaaS), infrastructure as a service (IaaS) and platform as a service (PaaS). A strong work ethic, analytical and critical thinking, and the ability to meet change requests at a moment’s notice are expected. Because the role interfaces regularly with other business units and serves as a design authority, strong listening and communication skills are essential. This is an individual contributor role with no direct reports, and it carries a standing expectation of technical leadership and mentorship.\nEssential Job Duties:\nArchitecture and Engineering\nDefine and maintain the cloud security baseline and reference architectures across public, private and hybrid cloud infrastructure, and own the assessment program that measures resource architecture and configuration against them.\nEstablish and hold a consistent set of cloud security standards across all brands and business units, accounting for differing cloud footprints and maturity levels.\nPlan, implement, automate and operate cloud security controls across SaaS, IaaS and PaaS environments, including strong identity and access management (IDAM) controls.\nDesign and deliver production quality tooling, dashboards, automation and policy as code that improve cloud security posture and make secure configuration the default for product, application and development teams.\nCarry proof of concept work through to production ownership, and own the automation and integration code that supports it, including scripts for custom extract, transform, load (ETL) work with a security focus for data flow.\nDetection and Response\nRespond to and investigate cloud security alerts raised by the SOC and detection teams, taking cloud originated incidents through deeper investigation, containment and resolution, and serving as senior escalation for cloud specific detections.\nDesign detection content and log pipelines that give security operations usable visibility into cloud and SaaS activity.\nLead post incident review for cloud incidents and drive the resulting control changes to closure, with strict documentation and reporting.\nAdvisory and Governance\nServe as security design authority in architecture review, project and change management forums, and act as the escalation point for product and development teams on cloud security design decisions.\nProtect business applications in compliance with privacy, security, business resiliency and compliance frameworks as defined in corporate policies, and translate those frameworks into enforceable technical guardrails and evidence.\nOwn the remediation program following security assessment findings, set priority based on risk, and hold owning teams to committed dates.\nLead security assessment of cloud vendors and third party integrations, and own the escalation path to security management and business unit leads when material risk is discovered.\nAssess the cloud threat landscape and translate it into a prioritized control roadmap, including build versus buy evaluation and tool selection. Stay apprised of current and proposed changes to regulatory, privacy and security industry guidance, and apply that knowledge across key lines of business.\nProgram Leadership\nOwn the cloud security program roadmap across all brands and drive measurable improvement in overall cloud security maturity over time.\nAuthor and maintain the cloud security policy, standard and process library, keeping it current as the environment, the brands and the threat landscape evolve.\nMaintain a cloud security risk register that tracks risks, owners and remediation status across the business.\nDefine cloud security KPIs and posture metrics, and report them to security leadership on a regular cadence.\nEstablish and run the operating model for cloud security across the organization, partnering directly with each brand's engineering and product leads and participating in architecture and change forums to drive security decisions without direct authority.\nBuild and maintain self-service security capabilities for engineering teams, including guardrail documentation, secure-by-default patterns and targeted enablement, so teams can build securely without depending on a single gatekeeper.\nTechnical Leadership\nMentor and technically review the work of other engineers, including design review and code review.\nDocument and communicate risk and tradeoffs to both engineering and executive audiences, and drive areas of security improvement that balance risk with business operations without diminishing efficiency or innovation.\nPerform other duties as assigned.\nSkills and Experience\nAt least 7 years of experience in cybersecurity as a practitioner, with at least 4 years of hands on cloud security experience in Google Cloud Platform (GCP), Microsoft Azure, or Amazon Web Services (AWS). Depth in one platform with working knowledge of the others is expected.\nExperience delivering cloud security in a regulated environment, healthcare preferred.\nDeep hands on experience with cloud native application protection platform (CNAPP) and cloud security posture management (CSPM) solutions.\nExperienced in cloud networking architecture and cloud operations. SaaS security posture management and cloud access security broker (CASB) experience preferred.\nInfrastructure as code experience, including a cross platform tool such as Terraform and the native option for at least one cloud, along with infrastructure as code security scanning.\nPolicy as code and preventative guardrail experience using native cloud policy engines and open policy frameworks.\nContinuous integration and continuous delivery pipeline security and software supply chain security experience, including secrets management with a cloud native or third party vault, and practical use of Git based workflows and a pipeline platform.\nDemonstrated experience securing container and Kubernetes workloads, including admission control, image scanning and runtime protection.\nSecurity information and event management (SIEM) and detection engineering experience, including log pipeline design and correlation content authoring.\nCloud identity depth beyond OAuth and OpenID, including conditional access, workload and federated identity, and privileged access management.\nNetwork and encryption experience, including virtual private networks (VPNs), IPsec, SSL/TLS, LDAP and public key infrastructure (PKI).\nData security and data loss prevention experience across cloud and SaaS environments.\nExposure to securing artificial intelligence and large language model workloads.\nProficient in Python and PowerShell, writing maintainable code and working in version control with peer review.\nAble to read and reason about cloud automation and configuration (for example Terraform, YAML and JSON) well enough to review it from a security perspective and collaborate with engineering teams on guardrails.\nComfortable operating inside developer workflows, including pull request and code review, branching strategies, and modern software development lifecycle and DevOps practices, so security is embedded in how teams already build rather than bolted on afterward.\nExperienced in the use of threat intelligence services in a production environment.\nExperience and understanding of various regulatory requirements and laws, including but not limited to: Payment Card Industry (PCI), Health Insurance Portability and Accountability Act (HIPAA). Additionally, experience in one or more of the following: ISO 27001/2, CIS, ITIL or NIST.\nUp to date understanding of a wide range of incident response, system configuration, vulnerability management and hardening guidelines.\nTrack record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.\nDemonstrated experience delivering security consistently across multiple business units, brands or independently run environments.\nAdditional Qualifications:\nDemonstrated problem solving ability on complex and ambiguous security requirements with limited direction.\nAbility to influence without authority across engineering, product and business organizations.\nSelf motivated and self directed, well organized, and able to position controls in anticipation of threats.\nSuccessful track record collaborating with technical and non technical teams to promote ideas that support business enablement.\nFamiliarity with United States federal and state privacy laws.\nExperience writing technical documentation.\nEducation Requirements:\nBachelor’s degree in computer science, information assurance, MIS or related field. Equivalent industry experience is fully acceptable in place of a degree.\nExperience Requirements:\n7+ years of related experience required, including at least 4 years of hands on cloud security experience.\nCertification Requirements:\nOne or more of the following preferred: CCSP, CISSP, Google Professional Cloud Security Engineer, Microsoft Certified Azure Security Engineer Associate (AZ-500), AWS Certified Security Specialty, or GIAC GCSA, GPCS or GCLD.\nAnnual Salary Range: $160,000-$185,000/year, with a generous benefits package that includes paid time off, health, dental, vision, and 401(k) savings plan with match.\nIf you are an applicant residing in California, please view our privacy policy here: https://careers.aspendental.com/us/en/tag-privacy-policy-for-california-employees","description_format":"text","description_chars":11633,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security"],"lifecycle":[{"event":"open","at":"2026-10-14T19:10:24Z"}],"visa":[],"liveness":{"score":83,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.832,"p_room":1,"age_days":10,"expected_fill_days":38,"reasons":["conf:6","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":185000,"is_top_pay":true},"html_url":"https://alion.io/job/teamtag-senior-cloud-security-engineer","json_url":"https://alion.io/job/teamtag-senior-cloud-security-engineer.json","meta":{"generated_at":"2026-10-15T10:59:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16844,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2231267},"rest":"https://alion.io/mcp/rest/get_company?id=2231267"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fteamtag-senior-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fteamtag-senior-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fteamtag-senior-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/teamtag-senior-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fteamtag-senior-cloud-security-engineer"}]}