SR Cloud Security Engineer

BJ's Wholesale Club seeks a Sr Cloud Security Engineer to lead the design, implementation, and ongoing improvement of secure cloud platforms supporting our wholesale and e-commerce operations. In this role, you will architect security controls for AWS/Azure, harden cloud networks and identities, and automate guardrails using IaC and scripting. You'll partner with technology, data, and operations teams to embed security into CI/CD pipelines, monitor threats, and drive incident response. Join a member-focused, collaborative culture with strong growth, training, and advancement opportunities.

Responsibilities

• Design and maintain secure cloud architectures for AWS/Azure environments
• Implement and manage IAM, network security, and encryption controls
• Automate security guardrails using Infrastructure as Code and scripting
• Integrate security into CI/CD pipelines and Dev
• Sec
• Ops practices
• Monitor cloud environments with SIEM and respond to security incidents
• Conduct threat modeling, risk assessments, and remediation planning
• Ensure adherence to compliance frameworks such as NIST and ISO 27001
• Collaborate with engineering, data, and operations teams to embed security
• Develop security standards, runbooks, and technical documentation
• Mentor engineers and promote security best practices across teams

Required Skills

• Cloud security architecture (AWS/Azure)
• Identity and access management (IAM)
• Network security and segmentation
• Security automation and scripting (Python, Power
• Shell)
• CI/CD pipeline security
• Container and Kubernetes security
• Compliance frameworks (NIST, ISO 27001, PCI)
• SIEM and security monitoring
• Infrastructure as Code (Terraform, Cloud
• Formation)
• Incident response and forensics in cloud