Senior Cloud Security Engineer

About the role

Amgen is looking for a Senior Cloud Security Engineer to join its Cloud Security Organization within the Global Cybersecurity and Digital Trust team, based at the Lisbon Capability Center. The role secures Amgen's global cloud platforms by designing, implementing and continuously improving cloud security across AWS and other cloud environments, working with engineering, infrastructure, DevOps and security teams, and helping drive the responsible adoption of AI technologies.

Key responsibilities

• Design and implement secure cloud architectures and network security (Zero Trust, micro-segmentation, WAF, API security, hybrid connectivity).
• Build IAM, PAM, encryption, KMS/HSM, secrets management and certificate lifecycle controls.
• Implement CSPM, CWPP, vulnerability management and automated compliance, and secure IaC with Terraform, CloudFormation and policy-as-code.
• Create governance frameworks, baselines, guardrails and landing zones across AWS, Azure and GCP.
• Integrate CloudTrail, Azure Monitor, GCP Cloud Logging and security tools into SIEM and SOC platforms.
• Embed security in the SDLC via automated testing, IaC scanning, secrets management and container security in CI/CD pipelines.
• Secure Kubernetes, serverless and cloud-native applications, and partner with SOC and IR on incident investigation and threat hunting.
• Lead architecture reviews, conduct threat modeling and risk assessments, and evaluate emerging cloud and AI technologies.
• Secure cloud-native AI and ML services (Generative AI, LLMs, AI orchestration platforms) and enterprise AI platforms such as Databricks.
• Automate security capabilities, maintain security documentation and runbooks, mentor teams, support audits and comply with regulations.

Required profile

• Collaborative security professional with a strong technical foundation and a passion for cloud security.
• Preferred: strong understanding of information security principles (authentication, authorization, confidentiality, integrity, availability) and secure design principles (least privilege, defense in depth, secure-by-design).
• Good understanding of cryptography, encryption and key lifecycle management.
• Experience securing AWS environments (IAM, data security, network security, compute security, security operations, secure DevOps).
• Knowledge of AI security principles and experience securing cloud-native AI services.

Required skills

• AWS, Azure and GCP
• Terraform and CloudFormation
• SIEM integration and security automation
• Container security and Kubernetes