W2 REQ** - Cloud Security Engineer - JN -102026-165872

GC/USC only!!!

Client : Recology

Location : Sacramento, CA (Hybrid)

Duration : Long Term

Pay : $65/Hr w2 + Referral

Job Description

Under limited general direction, supports the ongoing evolution of the company's technology landscape, with an emphasis on expanding and maturing security capabilities across cloud-based platforms while maintaining strong protections across existing systems.

This position will be hybrid, coming into the office three days per week, and working from home two days per week.

Essential Responsibilities

• Designs, implements, and manages security controls across the company's cloud environments (Azure, AWS, GCP), ensuring secure configurations, access controls, and compliance with company standards.
• Supports the organization's transition from on-prem infrastructure to cloud platforms by embedding security into architecture, migration, and deployment processes.
• Establishes and maintains cloud security baselines, guardrails, and configuration standards (CSPM, identity, networking, and data protection).
• Configures and manages native cloud security services (Microsoft Defender for Cloud, Azure Security Center, AWS Security Hub, etc.).
• Acts as a cloud security SME supporting IT and engineering teams through design reviews, threat modeling, and security validation.
• Partners with infrastructure, application, and data teams to integrate security into system design and project delivery.
• Identifies and remediates security gaps in cloud and hybrid architectures.
• Implements and manages secure identity and access controls using Azure AD and related technologies (RBAC, Conditional Access, least privilege principles).
• Supports the design and implementation of identity strategies across cloud and on-prem environments.
• Develops and enhances threat detection capabilities across cloud and enterprise environments using SIEM and cloud-native telemetry.
• Participates in incident response activities, including investigation, containment, and post-incident reviews.
• Builds and maintains automation workflows for security monitoring, alerting, and response.
• Improves security processes through scripting and integration with existing tools and platforms.
• Develops and track KPIs and metrics to measure cloud security posture and program effectiveness.
• Supports security audits and ensure compliance with regulatory frameworks including NIST CSF, PCI DSS, ISO 27001, and CCPA.
• Develops and maintain cloud-specific security standards, procedures, and documentation
• Contributes to vulnerability management and risk remediation efforts across cloud and enterprise systems.
• Works closely with IT, Security, and business stakeholders to align security initiatives with organizational goals.
• Provides guidance on emerging cloud threats, risks, and best practices.
• Supports disaster recovery and business continuity planning for cloud systems.
• Other duties as assigned.

Job Responsibilities

• Cloud Safeguards & Governance: Architect, deploy, and administer security measures across multi-cloud infrastructure (AWS, Azure, GCP). Enforce proper configurations, manage access policies, and establish cloud security baselines, guardrails, and compliance standards (including CSPM, network security, identity management, and data protection).
• Cloud Transformation: Embed proactive security controls into system architecture, migration pipelines, and deployment frameworks to facilitate safe transitions from legacy on-premise setups to cloud ecosystems.
• Security Administration & Tooling: Oversee cloud-native security utilities (such as AWS Security Hub, Azure Security Center / Defender for Cloud, and related platform tools).
• Subject Matter Expertise & Advisory: Function as the primary technical advisor for cybersecurity. Conduct design evaluations, lead threat modeling, perform security validations, and partner across software engineering, IT, and data teams to incorporate security early in the project lifecycle.
• Identity & Access Management (IAM): Configure and maintain robust identity controls using Azure Active Directory and modern access solutions (enforcing least-privilege principles, Role-Based Access Control, and Conditional Access policies) across enterprise and cloud landscapes.
• Threat Detection & Incident Handling: Utilize SIEM tools and cloud telemetry to enhance threat monitoring and detection capabilities. Lead containment, root-cause investigations, and post-incident analysis during security events.
• Automation & Process Improvement: Streamline security monitoring, alerting, and incident response operations by creating automated workflows and scripts (e.g., Python, PowerShell).
• Metrics, Risk & Compliance: Define and monitor key performance indicators to assess overall posture. Assist with security audits and maintain alignment with industry benchmarks and regulatory mandates (e.g., NIST CSF, ISO 27001, PCI-DSS, CCPA).
• Risk Mitigation & Remediation: Contribute to vulnerability management programs, enterprise risk reduction efforts, and disaster recovery / business continuity planning for cloud services.
• Documentation & Leadership: Draft and maintain cloud security guidelines, standard operating procedures, and technical documentation while staying current on emerging threats and industry trends

Terms & Conditions for Candidate Portal

Last Updated: May 6th, 2026

Please read these Terms & Conditions ("Agreement", "Terms") carefully before using the Candidate Portal ("Portal", "Service") provided by AKT Corp ("we", "us", "our").

By accessing or registering for the Portal, you ("Candidate", "User", "you", "your") agree to be bound by these Terms.

If you do not agree with any part of these Terms, you may not use the Portal.

1. Acceptance of Terms

By accessing or using the Candidate Portal, you affirm that you are at least 18 years old and are legally authorized to enter into this Agreement.

If you are accessing the Portal on behalf of an employer or third party, you represent that you have the authority to bind that entity to these Terms.

2. Purpose of Portal

The Portal is provided as a digital platform for Candidates to:

• Create and manage profiles
• Upload resumes, documents, and other professional details
• View and apply for job opportunities
• Track application status
• Communicate with recruiters and client organizations
• Access profile and document-related information

These Terms govern your use of the Portal and all related services.

3. User Registration & Account Security

• You agree to provide accurate, complete, and current information during signup.
• You are responsible for maintaining the confidentiality of your account credentials.
• You agree to immediately notify us of any unauthorized use of your account.
• You are responsible for all activities that occur under your account.

4. Document Upload & Verification

You understand and agree that:

• All resumes, documents, and information you upload must be true, accurate, and valid
• You are fully responsible for the accuracy and legality of the information you provide
• The Portal may use third-party verification services where applicable
• We reserve the right to reject or remove any document or information that appears invalid or misleading

5. Use of Portal Services

You agree to use the Portal in compliance with:

• Applicable laws and regulations
• Professional standards for IT professionals
• Client-specific requirements
• Instructions provided on the Portal

Prohibited actions include, but are not limited to:

• Uploading false or misleading information
• Interfering with Portal operations
• Sharing your credentials or login with others
• Attempting to bypass or manipulate application processes

6. Job Application

You acknowledge that:

• Job opportunities displayed on the Portal are not guaranteed of employment.
• Applications are subject to client requirements, screening, and approval.
• Job details (role, location, requirements) are subject to change.

7. Profile Accuracy & Updates

• You agree to maintain accurate and up-to-date information in your profile.
• Failure to keep your profile updated may impact your eligibility for job opportunities or result in account restrictions.

8. Privacy & Data Use

Your use of the Portal is subject to our Privacy Policy, which describes how we collect, use, and safeguard your personal information.

By using the Portal, you consent to the collection and use of information as described.

9. Intellectual Property

All intellectual property contained in or presented through the Portal is owned by us or our licensors.

You may not copy, modify, distribute, or otherwise use any Portal content without express written permission.

10. Disclaimer of Warranties

The Portal and all content and services are provided "as is" and "as available."

We make no warranties, express or implied, including:

• Merchantability
• Fitness for a particular purpose
• Accuracy or completeness of information

11. Limitation of Liability

To the fullest extent permitted by law, we are not liable for:

• Direct, indirect, incidental, special, or consequential damages
• Loss of data, profits, or business opportunities
• Claims arising from job application outcomes

12. Amendments

We may modify these Terms at any time.

Changes will be posted on the Portal with an updated "Last Updated" date.

Your continued use of the Portal after changes indicates your acceptance.

13. Termination

We may suspend or terminate your access to the Portal if you violate these Terms or for any reason, with or without notice.

(Azure, Aws, GCP