About KX
KX software powers the time-aware data-driven decisions that enable fast-moving companies to outpace competitors, realizing the full potential of their AI investments. The KX platform delivers transformational value by addressing data challenges related to completeness, timeliness and efficiency, ensuring companies understand change over time and can achieve faster, more accurate insights at any scale, cost-effectively.

KX is essential to the operations of the world's top investment banks, aerospace and defence, high-tech manufacturing, healthcare and life sciences, automotive and fleet telematics organizations. The company has established offices and a robust customer base across North America, Europe, and Asia Pacific.

ABOUT THE ROLE
KX Systems is looking for a Senior Engineer to lead cloud security, governance, and security engineering across a multi-cloud estate spanning AWS, Azure, and GCP. This is a hands-on role for someone who can design secure cloud architectures, build the automation that enforces them, and work directly with engineering teams, auditors, and enterprise customers to keep that architecture compliant and defensible.
You'll sit at the intersection of security engineering and governance: writing the Terraform and CI/CD pipelines that make security controls repeatable.
This role requires eligibility for Security Clearance. Candidates must be NATO/Irish nationals, meet the residency and nationality requirements for clearance, and must be willing to undergo the clearance process as a condition of employment. Skills

• Proven experience leading cloud security across AWS, Azure, and GCP in a production, multi-cloud environment.
• Strong hands-on experience with Terraform and CI/CD pipelines (GitLab CI/CD or equivalent) for security automation.
• Practical experience with cloud-native security tooling: Defender for Cloud, AWS Security Hub, GuardDuty, Inspector, and vulnerability management platforms such as Qualys or Snyk.
• Solid IAM and privileged access management background: AWS IAM/Identity Center, Azure Entra ID, PIM, RBAC, and access lifecycle management.
• Scripting ability in Python and/or PowerShell for automation and remediation.
• Experience supporting compliance frameworks such as ISO 27001, SOC 2, or Cyber Essentials Plus, including audit evidence and remediation work.
• Comfortable working directly with customers, auditors, and third-party vendors, not just internal teams.
• Clear communicator who can translate technical risk into decisions for both engineers and non-technical stakeholders.

Core Technology:
AWS, Microsoft Azure, GCP, Terraform, GitLab CI/CD, AWS Organizations, AWS IAM Identity Center, Azure Entra ID, Azure PIM, Azure Policy, Microsoft Defender for Cloud, AWS Security Hub, GuardDuty, Inspector, Qualys, Snyk, SonarQube, DRATA, Bitwarden, AWS Lambda, Azure Functions, Logic Apps, PowerShell, Python, IAM, DevSecOps, Vulnerability Management, ISO 27001, SOC 2, Cyber Essentials Plus, Secure by Design. Key Responsibilities

• Lead cloud security governance and remediation of security and vulnerability findings across AWS, Azure, and GCP: guardrails, IAM controls, tagging standards, privileged access management, and secure-by-design practices.
• Own and operate cloud security platforms, including Microsoft Defender for Cloud, AWS Security Hub, GuardDuty, Inspector, Qualys, DRATA, Snyk, SonarQube, GitLab, and Bitwarden.
• Build security automation and remediation using Terraform, GitLab CI/CD, AWS Lambda, Azure Functions, Logic Apps, PowerShell, and Python.
• Develop secure Infrastructure-as-Code and automated governance frameworks that improve consistency and reduce manual effort.
• Support ISO 27001, SOC 2, Cyber Essentials Plus, DRATA, Secure-by-Design, and customer security assessments, plus internal and external audits.
• Design and maintain least-privilege IAM and privileged access controls: AWS roles, Azure RBAC, PIM, service accounts, break-glass accounts, and access lifecycle management.
• Coordinate vulnerability management across cloud infrastructure and applications, working with tooling and penetration-testing teams.
• Support security incident investigations, cloud security reviews, and threat detection.
• Own security tooling integrations and provide onboarding, access governance, and technical guidance to engineering and security teams.
• Work directly with enterprise, stakeholders, on secure integrations, connectivity, key rotation, and compliance requirements.
• Support security requirements for regulated and financial-services customers, keeping cloud environments aligned to contractual and compliance obligations.