Cloud Security Engineer

ROLE SUMMARY

At the heart of Pfizers Digital transformation sits Global Cloud Services enabling modern cloud infrastructure and engineering capabilities that influence business outcomes and provide value to our business shareholders and patients every day.

The Cloud Security Engineer plays a key role within the Cloud Engineering organization contributing to the design implementation and automation of secure scalable and modern cloud platforms. This role supports multi-cloud security initiatives and helps deliver reliable well-architected and secure solutions that enable product teams across the enterprise.

The role helps engineer and secure the cloud infrastructure underpinning Pfizers core cyber security applications and takes part in adopting AI and agentic security tooling.

The ideal candidate has hands-on cloud engineering experience a security mindset strong Infrastructure-as-Code proficiency and a passion for automation cloud-native technologies and continuous improvement.

ROLE RESPONSIBILITIES

Cloud Security Engineering

• Implement and enhance security controls across AWS Azure and/or GCP following established engineering patterns and standards.

• Build and maintain secure Infrastructure as Code using Terraform OpenTofu or similar tools.

• Contribute to development of reusable secure cloud modules guardrails and reference architectures.

• Assist in designing secure scalable and resilient cloud environments aligned to enterprise best practices.

Automation & Tooling

• Develop and maintain security automation workflows using Python or other scripting languages.

• Support CI/CD and IaC security automation using platforms such as Spacelift GitHub Actions or equivalent tools.

• Help embed scanning secret protection and policy checks into developer pipelines.

Operations & Compliance

• Implement guardrails policies and controls to ensure secure and compliant cloud platforms.

• Monitor security posture system health and platform reliability using cloud-native and third-party tooling.

• Triage security findings troubleshoot infrastructure issues and collaborate with senior engineers on root cause analysis.

Collaboration & Continuous Improvement

• Work with application teams SRE security and architecture groups to deliver end-to-end secure cloud solutions.

• Contribute to platform modernization initiatives identifying opportunities to automate optimize or simplify.

• Share knowledge documentation and best practices to uplift security engineering maturity.

Cyber Security Applications & Platforms in Scope

The role engineers secures and operates the cloud infrastructure underpinning Pfizers core cyber security application estate including:

• Ping - enterprise identity and access management / federation and single sign-on.

• SailPoint - identity governance and administration access certification and lifecycle management.

• CyberArk - privileged access management secrets management and credential vaulting.

• CrowdStrike Falcon LogScale running on Amazon EKS - large-scale security log ingestion retention and threat hunting.

Cutting-Edge & Agentic Cloud Security Capabilities

This role sits at the front edge of AI-enabled security engineering. You will work with evaluate and operationalise emerging agentic capabilities that are reshaping how cloud security is delivered including:

• Developer-embedded secret and credential protection - preventing credentials and secrets from ever reaching a repository using GitHub Advanced Security (GHAS) push protection secret scanning code scanning and dependency review.

• Autonomous security agents for offensive testing - agent-driven penetration testing (black-box against external cloud estates and white-box against our own accounts) and continuous AI-assisted source code security review.

• AI red team and blue team agents within our cloud-native application protection tooling - using agentic red teaming to continuously probe cloud configurations and workloads and blue team agents to accelerate detection triage and response.

• AI-assisted vulnerability remediation - evaluating and adopting emerging code-repair models that generate and validate security fixes rather than only reporting findings.

• Hyperscaler-native security agents - early access and alpha programmes from AWS Microsoft and Google that bring agentic reasoning to cloud security posture threat detection and automated remediation.

• Agentic security engineering at scale - building the guardrails evaluation harnesses and human-in-the-loop controls that let autonomous agents operate safely against a regulated global pharmaceutical cloud estate.

BASIC QUALIFICATIONS

• Bachelors Degree in Computer Science Engineering IT or equivalent experience.

• 2 years of hands-on cloud platform or security engineering experience.

• Proficiency in at least one major cloud provider (AWS Azure or GCP).

• Infrastructure as Code experience (Terraform preferred).

• Experience with automation and scripting (Python strongly preferred).

• Solid understanding of networking identity encryption and security fundamentals in a cloud-native context.

• Ability to collaborate in global cross-functional engineering environments.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset adaptability to change and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• Multi-cloud familiarity (AWS Azure or GCP).

• Exposure to CSPM/CNAPP SIEM or log analytics vulnerability management or application security scanning tools.

• Knowledge of containerization and orchestration security (Docker Kubernetes EKS AKS or GKE).

• Exposure to IAM/SSO identity governance or privileged access management platforms.

• Interest in AI / agentic security tooling.

• Experience with Spacelift OpenTofu or similar IaC automation platforms.

• Familiarity with compliance frameworks (NIST CIS ISO 27001) or regulated environments.

• Relevant cloud or security certifications (AWS/Azure/GCP Security Security CCSP).

• Curious self-driven and committed to continuous skill development particularly around emerging AI security capabilities.

• Strong problem-solving and analytical mindset especially for complex cloud systems.

• Comfortable operating with high ownership and autonomy.

• Customer-focused mindset with the ability to balance engineering excellence security and business outcomes.

Please apply by sending your CV in English.

Work Location Assignment:Hybrid

Purpose

Breakthroughs that change patients lives... At Pfizer we are apatient centric company guided by our four values: courage joy equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives.

Digital Transformation Strategy

One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience.

Flexibility

We aim to create a trusting flexible workplace culture which encourages employees to achieve work life harmony attracts talent and enables everyone to be their best working start the conversation!

Equal Employment Opportunity

We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer Pfizer iscommitted to celebratingthisin all itsforms allowing for us to be as diverse as the patients and communities we serve. Together we continue to build a culture that encourages supports and empowers our employees.

Disability Inclusion

Our mission is unleashing the power of all our people and we are proud to be a disability inclusive employer ensuring equal employment opportunities for all candidates. We encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments to support your application and future career. Your journey with Pfizer starts here!

Pfizer endeavors to make accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing please email This is to be used solely for accommodation requests with respect to the accessibility of our website online application process and/or interviewing. Requests for any other reason will not be returned.

To learn more about acceptable and prohibited uses of AI during the recruitment process please review our candidate AI-use guidelines available onPfizer Careers.

Information & Business Tech

Required Experience:

IC

Employment Type : Full-Time
Experience: years
Vacancy: 1