Cloud Security Engineer

Title:  Cloud Security Engineer
Location:  Bolingbrook, IL (Hybrid)
Type: 6 Months Contract to Hire (W2 Contract)
Interview: WebEx/Video

✅ Technical Fit

☐ Experience with Google Cloud Platform IAM (roles, permissions, service accounts, RBAC)
☐ Cloud security operations experience (access requests, provisioning, security tickets)
☐ Understanding of cloud infrastructure, networking, and data protection
☐ Exposure to DevOps / DevSecOps environments
☐ Familiarity with NIST, CIS, or security control frameworks

✅ Soft Skills

☐ Strong communicator with technical and business stakeholders
☐ Able to gather requirements and ask thoughtful questions
☐ Self-sufficient and proactive problem solver
☐ Comfortable supporting multiple teams across the organization

✅ Authenticity Check (Priority)

☐ Can clearly explain projects listed on resume
☐ Gives specific examples rather than generic answers
☐ Demonstrates actual hands-on experience versus theoretical knowledge
☐ Responses are consistent throughout interview process
☐ No signs of AI-generated, coached, or proxy-assisted responses

JD:

THE IMPACT YOU CAN HAVE:

• Ulta Beauty is seeking a Cloud Security Engineer with hands-on, technical experience in securing our cloud platforms and modern application environments. This role will focus on implementing and improving cloud security controls, monitoring and responding to security findings, supporting compliance initiatives, and partnering with engineering and project teams to integrate security into cloud and application workflows.
• Ulta’s environment is primarily based within Google Cloud Platform (Google Cloud Platform), with a smaller Azure footprint supporting a subset of applications.
• The ideal candidate is a hands-on engineer who can solve technical security challenges across Cloud Infrastructure, IAM, data and workload protection, and DevOps (CI/CD) processes.
• Success in this role requires strong collaboration and communication skills, as you will work closely with infrastructure, platform, and application teams to improve security while enabling business objectives.

PREFERRED QUALIFICATIONS:

• Relevant cloud or security certifications such as Google Professional Cloud Security Engineer, Azure Security Engineer Associate (AZ-500), Security+, or equivalent.
• Familiarity with CNAPP and CSPM tools
• Experience with container security, Kubernetes security, and secure software supply chain practices.
• Exposure to application security tools and processes such as SAST, DAST, dependency scanning, secrets detection, software composition analysis (SCA), or secure code review.
• Familiarity with security frameworks such as CIS Benchmarks, NIST 800-53, PCI-DSS, or ISO 27001.
• Experience with scripting or automation using Python, PowerShell, Bash, or similar languages.
• Strong troubleshooting and analytical mindset with attention to detail.
• Comfortable working in fast-moving cloud environments with minimal supervision.
• Strong communication skills with both technical and non-technical teams.
• Accountable and proactive - able to identify risks before failures occur.