Cloud Security Engineer

About the role

Pfizer’s Global Cloud Services team is looking for a Cloud Security Engineer to design, implement and automate secure, scalable cloud platforms. You will work across AWS, Azure and GCP to protect the infrastructure that powers Pfizer’s core cyber‑security applications.

Key responsibilities

• Implement and enhance security controls across multi‑cloud environments (AWS, Azure, GCP) following established patterns.
• Build and maintain secure Infrastructure‑as‑Code using Terraform, OpenTofu or similar tools, and develop reusable modules and guardrails.
• Create security automation workflows with Python and integrate scanning, secret protection and policy checks into CI/CD pipelines using Spacelift, GitHub Actions or equivalent.
• Monitor security posture, system health and platform reliability, triage findings, and collaborate on root‑cause analysis.
• Partner with application teams, SRE, security and architecture groups to deliver end‑to‑end secure cloud solutions and drive platform modernization.
• Secure and operate cloud infrastructure for Pfizer’s cyber‑security applications such as Ping, SailPoint, CyberArk and CrowdStrike Falcon on Amazon EKS.

Required profile

• Hands‑on experience with cloud engineering and a strong security mindset.
• Proficiency in Infrastructure‑as‑Code and automation.
• Passion for cloud‑native technologies, continuous improvement and AI‑enabled security tooling.

Required skills

• AWS, Azure, GCP
• Terraform / OpenTofu
• Python scripting
• CI/CD platforms (Spacelift, GitHub Actions)
• Infrastructure‑as‑Code concepts
• EKS, CrowdStrike Falcon
• Identity and access solutions (Ping, SailPoint, CyberArk)