Principal Cloud Security Engineer

Cloud Security Engineering (CSE) is responsible for protecting Pega’s cloud infrastructure, applications, and data across AWS and GCP environments. The team partners closely with Cloud Operations, Service Reliability, and Engineering to ensure our environments are secure, scalable, and resilient.

Picture Yourself At Pega

You will join a fast-paced team dedicated to maintaining and improving cloud security systems and infrastructure to support mission-critical applications. In this role, you will own and deliver improvements for security-related systems, collaborate with stakeholders for change management, assist in incident response, and support ongoing improvements to cloud security practices and governance.

What You'll Do At Pega

• Own the implementation and maintenance of critical cloud security systems and supporting infrastructure
• Automate manual system administration and infrastructure tasks
• Contribute to the strategic direction of security controls across multiple cloud providers
• Assist with vulnerability management, remediation tracking, and risk mitigation efforts
• Partner with Cloud Operations and Engineering teams to provide guidance on secure configurations and best practices
• Help maintain and improve security policies, standards, and procedures
• Stay current on emerging cloud security threats and trends

• Passionate about cloud technologies and security best practices and have strong opinions about AI security
• Hands-on experience with AWS core services (EC2, VPC)
• Familiarity with infrastructure-as-code tools (Terraform, CloudFormation)
• Comfortable with scripting (Python, Ansible, PowerShell or similar)
• Strong problem-solving skills with the ability to troubleshoot and escalate appropriately
• Collaborative team player with strong communication skills

What You've Accomplished:

• 8+ years of experience in cloud engineering, cloud operations, SRT, SRE, DevOps, cloud security in cloud environments
• Demonstrated strong understanding of cloud security concepts and controls
• Experience automating and securing Linux systems and cloud-based infrastructure (SELinux, FIPS)
• Experience with security monitoring, alerting, or incident response (Splunk, Chronicle, CrowdStrike)
• Experience with containerized deployments

• Experience with Kubernetes
• Experience with multiple Linux distributions
• Work in FedRAMP or DOD Impact Level-rated environments
• Exposure to DevOps tools and CI/CD pipelines
• Familiarity with API integrations or modern cloud-native architectures
• Windows System Administration, automation

• Gartner Analyst acclaimed technology leadership across our categories of products
• Continuous learning and development opportunities
• An innovative, inclusive, agile, flexible, and fun work environment
• Competitive global benefits program inclusive of pay + bonus incentive, employee equity in the company

Base salary range for this role is 122,600 - 186,800 USD annually. This role may also be eligible for annual bonus OR commission, as well as benefits and other incentives.

The final compensation will be determined during the offer process based on the candidate's education, experience, skills, and qualifications, as well as market conditions and may vary from the posted range. We will share an information on benefits, bonus/commission, and other pay components for this role at the relevant recruitment stage.