Only W2- Information Security Cloud Engineer

Position :  Information Security Cloud Engineer (SME) – Project Engagement

Location : Durant OK-Must work onsite Monday & Tuesday (Remote Wednesday/Thursday/Friday)

Duration : 6 month Contract to HIRE 

Contract W2 (No C2C)

Ideal candidate should live in border cities of Durant, OK.

OR these Texas Locations: Sherman, Texas/Denison, Texas/Tom Bean, Texas/Anna, Texas/Melissa, Texas/ Frisco, Texas/McKinney, Texas/Gainesville, Texas /Howe, Texas

Our Oklahoma-based client is seeking an experienced Information Security Cloud Engineer / Subject Matter Expert (SME) to lead the design, implementation, and operationalization of a comprehensive cloud security program.
This role will establish enterprise-wide cloud asset visibility, implement standardized cloud security controls, and integrate continuous monitoring capabilities into the broader information security program. The consultant will serve as a hands-on technical leader focused on reducing cloud security risk, improving governance, strengthening compliance readiness, and enabling long-term operational sustainability.
The ideal candidate brings deep expertise across cloud security architecture, governance, monitoring, risk management, and Oracle-centric enterprise environments.
Job Responsibilities
Cloud Security Assessment & Asset Visibility

• Assess cloud environments, configurations, security posture, and billing structures, providing recommendations aligned to industry best practices
• Identify, document, and maintain a comprehensive inventory of cloud assets including:
  • Accounts, subscriptions, and tenants
  • Compute, storage, database, and networking resources
  • Identity objects, service principals, and managed identities
  • Security tooling integrations and logging sources
• Define asset ownership, business purpose, data classification, and production/non-production tiers
• Implement automated discovery and reconciliation processes where feasible
• Align inventory management practices with enterprise configuration management standards

Security Baseline & Cloud Hardening

• Develop and implement cloud security baseline standards aligned with:
  • Enterprise security policies
  • Regulatory and compliance requirements
  • Industry frameworks including NIST and CIS
• Establish and validate:
  • Secure configuration standards
  • Identity and access controls
  • Logging, monitoring, and telemetry requirements
  • Network segmentation and exposure controls
• Identify, prioritize, and remediate high-risk cloud misconfigurations
• Partner with Infrastructure, Engineering, Application, and Security teams to implement scalable and sustainable security controls

Continuous Monitoring & Detection

• Integrate cloud environments with approved security monitoring and SOC platforms
• Enable continuous monitoring for:
  • Configuration drift
  • Unauthorized or insecure deployments
  • Risky user and identity activity
  • High-risk assets and sensitive workloads
• Establish centralized logging, alerting, escalation criteria, and detection use cases
• Tune monitoring capabilities to reduce noise while maintaining effective risk coverage

Governance, Risk & Compliance

• Integrate cloud security findings into enterprise risk management and audit processes
• Define and report cloud security KPIs/KRIs including:
  • Inventory accuracy and coverage
  • Misconfiguration trends
  • Remediation velocity
  • Monitoring and detection effectiveness
• Produce documentation suitable for audit, regulatory, and executive review
• Support audits, tabletop exercises, and risk briefings as needed

Knowledge Transfer & Operational Sustainability

• Develop operational runbooks, standards, and procedures for cloud inventory management, secure deployment practices, and monitoring escalation
• Provide knowledge transfer and mentoring to Information Security, SOC, IT, and Engineering teams
• Dedicate scheduled time weekly to enhance internal cloud security knowledge and operational maturity
• Ensure the cloud security program is scalable and sustainable beyond the engagement

Deliverables

• Cloud asset inventory and ownership mapping
• Cloud environment security assessment
• Cloud security baseline standards and hardening documentation
• Risk-ranked remediation roadmap
• Monitoring architecture and SOC integration documentation
• Cloud security metrics and reporting framework
• Audit-ready documentation packages
• Operational runbooks and knowledge transfer materials

Success Criteria
The engagement will be considered successful when:

• A complete and accurate cloud asset inventory is established and maintained
• Cloud security baselines are implemented and enforced
• Continuous monitoring is operational and integrated into security workflows
• Cloud security risks are measurable, reportable, and actionable at the executive level
• Internal teams are equipped to sustain cloud security operations after the engagement

 
Job Qualifications

• 7+ years of experience in Information Security, Cloud Security, or Security Engineering roles
• Strong expertise securing enterprise cloud environments across Azure, AWS, Google Cloud Platform, and/or Oracle Cloud Infrastructure (OCI)
• Experience implementing cloud security controls including IAM, network segmentation, secure configuration standards, logging/telemetry, vulnerability management, and continuous monitoring
• Proven ability to establish cloud asset visibility, security baselines, remediation programs, and SOC/SIEM integrations
• Experience securing Oracle environments including OCI, Oracle ERP/HCM platforms, Oracle databases, and related identity/access controls
• Strong understanding of NIST, CIS, Zero Trust, risk management, and audit/compliance frameworks
• Ability to work cross-functionally with Infrastructure, Engineering, Security Operations, and Application teams
• Strong communication, documentation, and stakeholder management skills
• Hands-on technical expertise with the ability to balance strategic guidance and tactical execution

Preferred Certifications
CISSP, CCSP, CISM, GIAC Cloud Security, Azure Security Engineer, AWS Security Specialty, or equivalent cloud/security certifications preferred.