Cloud admin or analyst

Senior Cloud Administrator

Position Summary

Responsibilities

• Administer and harden cloud security controls across AWS, Azure, and/or GCP
• Maintain cloud security standards and reference documentation
• Review cloud deployment configurations for adherence to security baselines and flag deviations
• Run and administer Cloud Security Posture Management (CSPM) tools — configure policies, tune detections, triage findings, and drive misconfigurations to resolution
• Maintain control mappings against applicable compliance frameworks (CIS, NIST, SOC 2, ISO 27001, etc.)

• Maintain SaaS security configuration standards
• Run and administer SaaS Security Posture Management (SSPM) tools — configure policies, monitor for drift, and remediate findings directly
• Own IAM administration for SaaS platforms — configure and manage SSO, MFA, and provisioning/deprovisioning workflows end-to-end
• Review SaaS integrations and third-party connections against security guidelines and remediate gaps

• Conduct cloud and SaaS security assessments and configuration audits; execute remediation directly
• Monitor cloud infrastructure and SaaS platforms for suspicious activity, risky configuration changes, unauthorized access, and abnormal behavior
• Maintain detections, alerts, and incident response workflows
• Investigate cloud and SaaS security incidents; perform root-cause analysis and implement fixes to prevent recurrence
• Identify, track, and prioritize vulnerabilities, misconfigurations, and audit/pen-test findings
• Work directly with IT and business stakeholders to execute mitigation and remediation plans
• Mentor junior administrators on tooling and remediation practices
• Perform other duties as assigned or needed

Required Qualifications

• Bachelor''s degree in a technology-related discipline, or demonstrated equivalent experience
• 3–6+ years of hands-on experience in Cloud Security, Cybersecurity, IAM Administration, or Cloud Engineering
• Direct, hands-on experience configuring and running CSPM and/or SSPM tools (not just consuming reports)
• Direct, hands-on experience managing IAM/SSO/MFA — configuration, provisioning/deprovisioning, and troubleshooting
• Working knowledge of information security tools and concepts across Endpoint Security, Identity Management, or related domains
• Proficiency in at least one of the following (or similar): Cloud/SaaS Security, SIEM, EDR, Web Security, Firewall, Email Security, NDR, Password Management, Privileged Access Management, PCI Compliance, GRC, Vulnerability Management, BCP, DR
• Strong analytical and troubleshooting skills with attention to detail; able to exercise judgment on ambiguous issues with minimal oversight
• Ability to participate in an on-call rotation to troubleshoot and respond to security incidents
• Track record of implementing and managing security tools/controls for servers, endpoints, cloud, or network systems
• Strong communication skills for working directly with IT and business stakeholders on remediation

Preferred Qualifications

• Retail industry experience
• Cloud security certifications (e.g., AWS, Azure, or GCP security certifications)
• CompTIA Security+
• Progress toward CISSP or similar advanced certification

Engagement Details

• This is a contract-to-hire engagement through Catapult Solutions Group. The contractor will be assigned to a third-party end client for the duration of the contract.