BJ's Wholesale Club seeks a Sr Cloud Security Engineer to lead the design, implementation, and ongoing improvement of secure cloud platforms supporting our wholesale and e-commerce operations. In this role, you will architect security controls for AWS/Azure, harden cloud networks and identities, and automate guardrails using IaC and scripting. You'll partner with technology, data, and operations teams to embed security into CI/CD pipelines, monitor threats, and drive incident response. Join a member-focused, collaborative culture with strong growth, training, and advancement opportunities.
Responsibilities
- Design and maintain secure cloud architectures for AWS/Azure environments
- Implement and manage IAM, network security, and encryption controls
- Automate security guardrails using Infrastructure as Code and scripting
- Integrate security into CI/CD pipelines and Dev
- Sec
- Ops practices
- Monitor cloud environments with SIEM and respond to security incidents
- Conduct threat modeling, risk assessments, and remediation planning
- Ensure adherence to compliance frameworks such as NIST and ISO 27001
- Collaborate with engineering, data, and operations teams to embed security
- Develop security standards, runbooks, and technical documentation
- Mentor engineers and promote security best practices across teams
Required Skills
- Cloud security architecture (AWS/Azure)
- Identity and access management (IAM)
- Network security and segmentation
- Security automation and scripting (Python, Power
- Shell)
- CI/CD pipeline security
- Container and Kubernetes security
- Compliance frameworks (NIST, ISO 27001, PCI)
- SIEM and security monitoring
- Infrastructure as Code (Terraform, Cloud
- Formation)
- Incident response and forensics in cloud