The posting
Job Posting End Date
11-21-2026
Please note the job posting will close on the day before the posting end date
Job Summary
As an Advanced Cloud Security Engineer, you will serve as a technical anchor for our enterprise cloud defense strategy. Your primary mission will be engineering, implementing, and monitoring robust security guardrails within our Amazon Web Services (AWS) ecosystems, while providing critical secondary security engineering support across our multi-cloud footprint, including Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI).
In this role, you won't just be managing alerts—you will be treating infrastructure as code, embedding security directly into the CI/CD pipeline, and defining policy as code to enforce continuous compliance. Additionally, you will play a key role in managing and optimizing our third party SSE (Security Service Edge) platform to seamlessly secure data, web, and cloud access across AWS, Azure, and GCP environments.
Job Description
What you’ll do:
Responsibilities include the following related to securing cloud compute, network, storage, and end user infrastructure:
- AWS Security Engineering: Design, build, and maintain enterprise-grade security controls utilizing third party SSE and native AWS security services.
- Multi-Cloud Support: Provide primary to AWS / secondary security engineering, posture management, and threat detection support for Azure, GCP, and OCI environments.
- DevSecOps & Automation: Work with our Cloud Engineering group to help operationalize Infrastructure as Code (IaC) and Policy as Code (PaC) to automate security guardrails, vulnerability scanning, and compliance checks.
- SSE Management: Architect and maintain policies within the third party SSE platform to protect corporate data and govern cloud applications across our primary cloud environments.
- Incident Response & Threat Hunting: Partner with our SOC to investigate cloud-specific security incidents, develop automated remediation playbooks, and conduct threat-modeling exercises.
Preferred Capabilities and Qualifications
Candidates must demonstrate a deep, hands-on technical understanding and operational compatibility with the following:
- Native AWS Security Ecosystem: Comprehensive understanding of AWS security services, including but not limited to: AWS IAM (complex policies, permission boundaries, organizations), AWS GuardDuty, AWS Security Hub, AWS Config, AWS CloudTrail, KMS, Macie, and Network Firewall.
- Multi-Cloud Fundamentals: Functional technical competency and architectural understanding of security controls in Azure (Entra ID, Microsoft Defender for Cloud), GCP (Security Command Center, IAM), and OCI (Identity and Access Management, Cloud Guard).
- Automation & Code: Strong proficiency in IaC tools (specifically Terraform or AWS CloudFormation) and a deep understanding of PaC frameworks (such as Open Policy Agent/Rego, AWS CloudFormation Guard, or HashiCorp Sentinel) to enforce compliance before deployment.
- Enterprise Networking & SASE/SSE: Foundational understanding of cloud routing, VPC/VNet peering, CASB (Cloud Access Security Broker), Secure Web Gateway (SWG), and Zero Trust Network Access (ZTNA) concepts.
The ideal candidate will stand out if they possess the following advanced capabilities:
- SASE/SSE Experience: Direct, hands-on experience configuring, tuning, and deploying a SASE/SSE platform (CASB, SWG, DLP) across AWS, Azure, and GCP.
- Advanced IaC/PaC Implementation: Proven track record of building automated compliance pipelines that block non-compliant code and infrastructure from being merged into production.
- Cloud Security Architecture: Experience shifting organizations from reactive security monitoring to proactive cloud security posture management (CSPM) and continuous compliance.
- Industry Certifications: Highly preferred certifications include:
- AWS Certified Security – Specialty
- AWS Certified Solutions Architect – Professional
- CCSP (Certified Cloud Security Professional) / CISSP
- Other AWS, Microsoft Azure, Google Cloud Platform, or Oracle Cloud Infrastructure certifications.
- CCIPS, CCSP, CERT Incident Response Process Professional
- CISM, CISSP, CNDA, CNPS
- GIAC Certifications (e.g., GCIH, GCIP, GSEC, GREM)
- Other vendor-specific cloud certifications
What We're Looking For:
Solutions Engineer Staff (SG9)
Education requirements are listed below:
- Bachelor's degree in computer science, engineering, or related technical field is required.
Work Experience requirement listed below:
- 8 years of relevant work experience is required. An equivalent combination of education and related experience may be considered.
Solutions Engineer Lead (SG10)
Education requirements are listed below:
- Bachelor's degree in computer science, engineering, or related technical field is required.
Work Experience requirement listed below:
- 10 years of relevant work experience is required. An equivalent combination of education and related experience may be considered.
What You’ll Get:
In addition to a competitive compensation, AEP offers a unique comprehensive benefits package that aims to support and enhance the overall well-being of our employees.
Where Putting the Customer First Powers Everything We Do!
At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!
Compensation Data
Compensation Grade:
SP20-010
Compensation Range:
$116,255.00 - $177,503.00
The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.
Candidates will be considered based on their qualifications and the candidate’s ability to work from an approved work location. Although the location is flexible, AEP does not have a presence in all states and localities. The following locations are NOT currently approved for this position: AK, CA, CO, CT, DE, HI, IA, ID, KS, MA, ME, MS, MT, ND, NH, NJ, NM, NV, NY, OR, RI, SD, UT, VT, WY, US Territories or international work locations. AEP will consider qualified candidates who are willing to relocate to an approved work location, at the candidate’s expense, provided the relocation can be completed within a timeframe that meets AEP’s staffing needs. NOTE: All remote work locations require vetting and final approval prior to offer and/or start date. Any work locations listed as preferred or unapproved relate specifically to the requirements for this position and are not necessarily applicable to other posted positions.
Hear about it first! Get job alerts by email. Log in to your Candidate Home Account today! If you don't have an account, you can create one.
It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.
