Senior Cloud Administrator

Role Summary
A Senior Cloud Administrator is responsible for managing and enhancing the security posture of cloud infrastructure and SaaS applications. This role involves ensuring compliance, configuring security controls, and performing security assessments across AWS, Azure, and GCP platforms. The ideal candidate possesses deep hands-on experience with security management tools and practices, exercising independent judgment to resolve security issues efficiently.

Responsibilities

• Administer and harden cloud security controls across multiple cloud platforms, including AWS, Azure, and GCP.
• Maintain cloud security standards and reference documentation to support compliance and best practices.
• Review cloud deployment configurations for adherence to security baselines, identifying and flagging deviations.
• Operate Cloud Security Posture Management (CSPM) tools, including configuring policies, tuning detections, triaging findings, and driving remediation efforts.
• Manage control mappings to compliance frameworks such as CIS, NIST, SOC 2, and ISO 27001.
• Maintain SaaS security configurations, monitor for drift using SSPM tools, and remediate findings directly.
• Oversee IAM administration for SaaS platforms, including SSO, MFA, and user provisioning workflows end-to-end.
• Review SaaS integrations and third-party connections, ensuring security compliance and closing gaps.
• Conduct security assessments, configuration audits, and execute remediation steps for cloud and SaaS environments.
• Monitor infrastructure for suspicious activity, abnormal behavior, and risky configurations, maintaining detection and incident response workflows.
• Investigate security incidents, perform root cause analysis, and implement preventive fixes.
• Track vulnerabilities and misconfigurations, prioritizing remediation efforts based on risk.
• Collaborate with IT and business teams to develop and execute mitigation strategies.
• Mentor junior administrators on security tooling, configuration, and remediation best practices.
• Perform additional security-related duties as assigned.

Qualifications

• Bachelor's degree in a technology-related discipline or equivalent experience.
• 3-6+ years of hands-on experience in cloud security, cybersecurity, or cloud engineering.
• Proven expertise configuring and operating CSPM and SSPM tools, not just reporting.
• Extensive experience managing IAM, SSO, MFA — configuration, provisioning, troubleshooting.
• Working knowledge of security concepts across endpoint security, identity management, and related domains.
• Proficiency in cloud security, SIEM, EDR, web security, firewalls, email security, vulnerability management, GRC, or related areas.
• Strong analytical and troubleshooting skills, with attention to detail and sound judgment for ambiguous issues.
• Ability to participate in a rotating on-call schedule for incident response.
• Demonstrated success in implementing and managing security controls within cloud, server, or network environments.
• Effective communication skills for collaboration with IT and non-technical stakeholders.
• Relevant cloud security certifications (e.g., AWS, Azure, GCP security certs) and progressing toward CISSP are preferred.
• Retail security experience is a plus.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.
   

Publishing Pay Range: $56.00 – $61.00 Hourly

This position is based in office and requires employee to work on-site.