Cloud Security Consultant

About the role

MPIV Partners is seeking a Cloud Security Consultant to evaluate and improve the security posture of client cloud environments across AWS, Azure and Google Cloud. The role works closely with engineering, security and DevOps teams to design secure architectures, configure cloud‑security platforms and embed security into development and operational workflows.

Key responsibilities

• Assess cloud security posture across AWS, Azure and GCP, identifying misconfigurations, excessive permissions and exposure paths.
• Implement and optimise CNAPP, CSPM and related cloud‑security solutions.
• Review Kubernetes environments, Terraform IaC, and CI/CD pipelines for security gaps.
• Provide practical remediation recommendations that balance technical feasibility and business constraints.
• Support the adoption of DevSecOps practices throughout the software development lifecycle.
• Conduct security reviews, threat‑modeling activities and produce technical documentation, standards and runbooks.

Required profile

• Hands‑on experience securing at least one major cloud platform (AWS, Azure or Google Cloud).
• Practical knowledge of cloud security concepts such as identity and access management, network security, data protection, logging, monitoring and incident response.
• Experience with cloud‑security platforms (CNAPP, CSPM, CWPP, CIEM or vulnerability‑management tools).
• Familiarity with Kubernetes, Terraform or other infrastructure‑as‑code technologies and CI/CD security.
• Strong written and spoken English and ability to communicate findings to both technical and non‑technical stakeholders.
• Bachelor’s degree in computer science, information security, engineering or equivalent practical experience.

Required skills

• AWS, Microsoft Azure, Google Cloud Platform
• Identity and Access Management, Network Security, Data Protection, Logging, Monitoring, Incident Response
• CNAPP, CSPM, CWPP, CIEM, Vulnerability‑Management solutions
• Kubernetes, Terraform, Infrastructure‑as‑Code, CI/CD pipelines
• SAST, DAST, Software Supply‑Chain Security, Secure Development Principles
• Palo Alto Networks Prisma Cloud, Cortex Cloud (preferred)