{"id":3485586,"url":"https://alion.io/job/work-street-manager-cloud-security-engineering","title":"Manager, Cloud Security Engineering","company":{"id":686337,"name":"Work Street","domain":"workstreet.com","url":"https://alion.io/company/workstreet","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Rippling","truth_index":{"grade":"A","score":86,"open_postings":7,"ghost_share":0,"stale_share":0.571,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-10-31T05:58:55Z"}},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"ET","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":224000,"period":"year","method":"role_country_seniority_unknown","sample_n":4424},"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CloudFormation","optional":false},{"name":"CMMC","optional":false},{"name":"Docker","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub Actions","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Vault","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-29T19:22:58Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-01T05:15:47Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"About Workstreet\nAt Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.\nGet to Know the Security Services Team\nWe are the team that turns complex security requirements and compliance frameworks into infrastructure and services that actually work. Moving fast and taking true end-to-end ownership, our Cloud Security Engineering team designs hardened AWS, Azure, and GCP environments, writes Terraform baselines, and fixes failing controls to meet frameworks like SOC 2, ISO 27001, CMMC, and FedRAMP. We do not hide behind process or just point out gaps. We step in, build solutions, and deliver real security posture improvements with minimal disruption.\nWhat makes this team special isn’t just our technical depth; it is how we back each other up. Our strongest engineers are the ones building reusable modules, writing custom tools, jumping into channels to unblock teammates, and mentoring without being asked. From early-stage startups to regulated enterprises, you will work directly with clients, take on real ownership early, and be surrounded by people who want to see you get good. If you enjoy solving tough security problems and want to be part of a team that is scrappy enough to move fast but seasoned enough to get it right, you will be in good company here.\nThe Opportunity\nWorkstreet is seeking a Manager, Cloud Security Engineering to lead a team of Cloud Security Engineers who design, build, and operate cloud security controls for our clients across AWS, Azure, and GCP. This is a player-coach leadership role for someone who has built hardened cloud environments themselves and now wants to multiply that impact through a team.\nYou will own the quality, capacity, and consistency of Cloud Security Engineering delivery: hiring and developing engineers, staffing and overseeing client engagements, setting engineering standards, and serving as the escalation point for technical and relationship issues. You will stay close enough to the work to review architecture, unblock engineers, and step into client conversations when it matters, while working alongside the GRC delivery teams to deliver outcomes that hold up in front of auditors and adversaries alike.\nYou will work with client engineering leads and executives during U.S. Eastern Time business hours, and you will be accountable for ensuring that every client environment achieves drift-resistant, code-defined security rather than documentation-only compliance.\nWhat You’ll Do\nLead and develop the team: manage, coach, and grow Cloud Security Engineers through clear expectations, regular feedback, performance reviews, and defined career paths.\nHire and onboard: build the interview process, recruit and select engineers, and onboard them so they take direct ownership of client work quickly.\nOwn delivery across the client portfolio: plan capacity, assign engineers to engagements, track milestones and quality, and make sure multiple concurrent engagements stay on schedule without sacrificing technical rigor.\nServe as the escalation point: handle technical and relationship escalations calmly, and lead conversations with client engineering leads and executives on scope, risk, and remediation priorities.\nSet engineering standards: define and maintain reusable Terraform and CloudFormation baselines, landing zone patterns, IAM and logging modules, and code review practices that make client environments drift-resistant.\nGuide cloud architecture decisions: review designs for AWS multi-account structures, Azure Hub-Spoke and Landing Zone architectures, least-privilege IAM, network segmentation, and encryption using services such as AWS KMS and Azure Key Vault.\nDirect native security tooling: set the approach for deploying and tuning AWS GuardDuty, Security Hub, AWS Config, Microsoft Sentinel, and Defender for Cloud, including logging pipelines for SIEM ingestion.\nEmbed security in delivery pipelines: establish guardrails and automated remediation workflows, including SAST, DAST, and secret scanning in GitHub Actions or Azure DevOps.\nTranslate frameworks into functional controls: ensure technical controls satisfy SOC 2, ISO 27001, HIPAA, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP requirements in practice, not only on a compliance map, and that evidence supports audit readiness.\nOversee incident response: set the escalation path for cloud security incidents and ensure rapid containment, diagnostics, and post-incident improvements.\nCollaborate across Security Services and GRC: coordinate with GRC delivery teams, and provide technical input on scoping, statements of work, and new client opportunities.\nContinuously improve the practice: track delivery health, remediation cycle times, and module reuse, and invest in tooling and automation that removes repetitive work for the team.\nStay hands-on where it counts: step into architecture reviews, complex remediations, and client workshops to unblock engineers and maintain technical credibility.\nWho You Are\nTechnical leader of cloud security engineers: experienced people manager who has hired, coached, and retained engineers, and who sets a high bar for work quality while backing the team under pressure.\nMulti-cloud security expert: deep, hands-on background securing AWS, Azure, and GCP environments, including IAM strategy (RBAC, ABAC, permission boundaries, federated identity via Okta or Entra ID), network zoning, encryption, and logging.\nInfrastructure as Code authority: fluent in Terraform, with working knowledge of CloudFormation, Python, or Bash, and able to review module design, versioning, state management, and provider security controls.\nGRC infrastructure strategist: maps technical cloud configurations to SOC 2, ISO 27001, GDPR, and HIPAA requirements, and distinguishes compliance mappings from functional technical controls.\nDelivery operator: thrives in a fast-paced startup environment, balancing multiple client portfolios and competing priorities while keeping the team focused on rapid, well-governed remediation.\nTrusted client advisor: partners with US-based technology founders, DevOps leads, and executive teams, handles escalations with calm professionalism, and leads architectural workshops.\nElite communicator: delivers precise written and verbal English communication that translates complex cloud risks into clear business decisions for both engineers and executives.\nWhat Will Help You Succeed\nValidated cloud security credentials: active certifications such as AWS Certified Security - Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer, CISSP, CISM, or CISA.\nExperience building or scaling a security engineering team: in a consulting, MSSP, or hyper-growth technology environment, including capacity planning and resourcing across client engagements.\nFederal and regulated environment experience: hands-on history building CMMC-compliant enclaves or FedRAMP security architectures, including NIST 800-53 and NIST 800-171 control implementation.\nFIPS 140 encryption implementation: practical experience configuring and enforcing FIPS 140 standards across cloud services.\nContainer and DevSecOps engineering: experience securing microservice architectures, Docker, and Kubernetes, including runtime security controls and vulnerability scanning.\nZero Trust deployment models: direct experience with identity-centric security policies, network micro-segmentation, and context-aware access.\nMonitoring and detection tooling: advanced use of logging platforms, SIEM, vulnerability management engines, and threat hunting feeds.\nWhat we offer\nCareer Development: Clear path with mentorship and training opportunities.\nRole-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.\nCompetitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.\nGrowth Opportunity: Early-stage company with significant room for career advancement.\nRemote-First Culture: Flexibility to work from anywhere while collaborating with a global team.\nWhat you'll need to thrive\nExcellent written and verbal English communication skills, with the ability to engage confidently with candidates, hiring managers, and business leaders across global teams.\nA reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, virtual interviews, and uninterrupted collaboration.\nCommitment to working a standard schedule of 8:00 AM-5:00 PM U.S. Eastern Time (ET) to effectively collaborate with team members, stakeholders, and cross-functional partners while ensuring timely communication and support.\nWillingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.\nHiring and Selection Process\nCandidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.\nEmployment is contingent upon successful completion of identity verification and background screening, where permitted by law.\nSelected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.\nCandidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.\nApplicants must be authorized to work in the U.S. without the need for visa sponsorship now or in the future. Workstreet does not provide employment-based visa sponsorship or transfers for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1 (OPT/CPT), J-1, or any other work-authorized visa category.\nWorkstreet Is An Equal Opportunity Employer\nAs an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.","description_format":"text","description_chars":10762,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Home office"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Information Security","Security Compliance"],"lifecycle":[{"event":"open","at":"2026-10-29T21:40:37Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":42,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/work-street-manager-cloud-security-engineering","json_url":"https://alion.io/job/work-street-manager-cloud-security-engineering.json","meta":{"generated_at":"2026-11-01T05:20:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8201,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":686337},"rest":"https://alion.io/mcp/rest/get_company?id=686337"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwork-street-manager-cloud-security-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwork-street-manager-cloud-security-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwork-street-manager-cloud-security-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/work-street-manager-cloud-security-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwork-street-manager-cloud-security-engineering"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3485586}},{"tool":"search_jobs","arguments":{"company":"workstreet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3485586},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}