Senior Cloud Security Engineering Lead

ROLE SUMMARY

At the heart of Pfizers Digital transformation sits Global Cloud Services enabling modern cloud infrastructure and engineering capabilities that influence business outcomes and provide value to our business shareholders and patients every day.

We are seeking a Senior Cloud Security Engineering Lead to join our growing team. This role requires a strategic technical leader proficient in securing multi-cloud environments with a strong emphasis on security engineering automation and infrastructure as code. The role owns the engineering hardening and reliability of the cloud platforms that host Pfizers core cyber security applications and leads the adoption of AI and agentic security tooling across the estate.

The ideal candidate brings deep expertise in at least one major cloud platform (AWS GCP or Azure) a hands-on approach using modern engineering practices and a proven track record in leading and mentoring technical teams.

Pfizer seeks individuals that are highly self-motivated eager to learn and effective when working in a team environment. A strong aptitude towards self-development continuous learning and growth is highly desired.

ROLE RESPONSIBILITIES

The Senior Cloud Security Engineering Lead provides technical leadership and design expertise for the secure engineering of Pfizers multi-cloud estate and leads a small technical team of 3-5 cloud security engineers providing guidance mentorship and support in their professional development.

Security Engineering & Architecture

• Lead the design implementation and management of multi-cloud security solutions focusing on preventative controls scalability and automation.

• Own cloud security reference architectures guardrails and landing zone controls across AWS Azure and GCP.

• Design and architect standards for secure deployment and management of multi-cloud infrastructure embedding security into platform patterns rather than bolting it on.

• Drive the adoption of policy-as-code and Infrastructure as Code security using Terraform OpenTofu Spacelift and Python.

Platform Automation & Detection Engineering

• Lead automation of security control deployment posture remediation and evidence collection across the cloud estate.

• Own detection engineering logging pipelines and observability for cloud security telemetry at enterprise scale.

• Serve as escalation point for cloud security operational issues and lead root cause analysis for significant incidents.

Leadership & Collaboration

• Manage and mentor a team of 3-5 cloud security engineers providing technical leadership coaching and career development.

• Partner with Cyber Security Risk Compliance and Architecture teams to support audits GxP and regulatory requirements and governance initiatives.

• Collaborate with global cloud engineers developers and product teams to build secure-by-default cloud-native capabilities.

• Ensure continuous improvement initiatives are identified prioritized and addressed within the cloud security environment.

• Stay ahead of cloud security threats technologies and engineering practices and set the direction for their adoption.

Cyber Security Applications & Platforms in Scope

• The role engineers secures and operates the cloud infrastructure underpinning Pfizers core cyber security application estate including:

• Ping - enterprise identity and access management / federation and single sign-on.

• SailPoint - identity governance and administration access certification and lifecycle management.

• CyberArk (Palo Alto Idira) - privileged access management secrets management and credential vaulting.

• CrowdStrike Amazon EKS - large-scale security log ingestion retention and threat hunting.

Cutting-Edge & Agentic Cloud Security Capabilities

• This role sits at the front edge of AI-enabled security engineering. You will work with evaluate and operationalize emerging agentic capabilities that are reshaping how cloud security is delivered including:

• Developer-embedded secret and credential protection - preventing credentials and secrets from ever reaching a repository using GitHub Advanced Security (GHAS) push protection secret scanning code scanning and dependency review.

• Autonomous security agents for offensive testing - agent-driven penetration testing (black-box against external cloud estates and white-box against our own accounts) and continuous AI-assisted source code security review.

• AI red team and blue team agents within our cloud-native application protection tooling - using agentic red teaming to continuously probe cloud configurations and workloads and blue team agents to accelerate detection triage and response.

• AI-assisted vulnerability remediation - evaluating and adopting emerging code-repair models that generate and validate security fixes rather than only reporting findings.

• Hyperscaler-native security agents - early access and alpha programs from AWS Microsoft and Google that bring agentic reasoning to cloud security posture threat detection and automated remediation.

• Agentic security engineering at scale - building the guardrails evaluation harnesses and human-in-the-loop controls that let autonomous agents operate safely against a regulated global pharmaceutical cloud estate.

BASIC QUALIFICATIONS

• Bachelors Degree in Information Technology Computer Science Computer Engineering or a similar discipline.

• 6 years of experience in cloud engineering cloud security or infrastructure roles.

• At least 2 years of experience in a technical leadership role managing or leading engineering teams.

• Deep expertise in at least one major cloud platform (AWS GCP or Azure) with demonstrated familiarity across multiple cloud providers.

• Strong experience building and deploying cloud infrastructure using industry-standard IaC tools such as Terraform OpenTofu or Pulumi.

• Strong command of cloud security fundamentals: identity and access management network security encryption and key management workload and container security and logging/monitoring.

• Proficiency in at least one major programming language (Python strongly preferred) for security automation and tooling.

• Experience securing or operating enterprise security platforms such as IAM/SSO identity governance privileged access management or SIEM/log analytics.

• Excellent communicator with the ability to influence horizontally and vertically across a large complex and matrixed organization.

• Strong technical leadership capabilities including the ability to coach mentor and develop other engineers.

• Customer-centric mentality with a bias towards delivering value at the speed demanded by the business.

• Demonstrated experience in an agile work environment possessing qualities such as a collaborative mindset adaptability to change and a proactive problem-solving approach.

PREFERRED QUALIFICATIONS

• Multi-cloud security experience across AWS GCP and Azure.

• Hands-on experience with Kubernetes / EKS security at scale.

• Experience with CNAPP / CSPM tooling and with GitHub Advanced Security or equivalent application security tooling.

• Experience applying AI or agentic tooling to security engineering problems.

• Experience qualifying cloud services capabilities for use within GxP or other highly regulated environments.

• Experience with Spacelift or similar IaC automation platforms.

• Relevant certifications (AWS/Azure/GCP Security Specialty CISSP CCSP OSCP or equivalent).

• Curious self-driven and committed to continuous skill development particularly around emerging AI security capabilities.

• Strong problem-solving and analytical mindset especially for complex cloud systems.

• Comfortable operating with high ownership and autonomy.

• Customer-focused mindset with the ability to balance engineering excellence security and business outcomes.

Please apply by sending your CV in English.

Work Location Assignment:Hybrid

Purpose

Breakthroughs that change patients lives... At Pfizer we are apatient centric company guided by our four values: courage joy equity and excellence. Our breakthrough culture lends itself to our dedication to transforming millions of lives.

Digital Transformation Strategy

One bold way we are achieving our purpose is through our company wide digital transformation strategy. We are leading the way in adopting new data modelling and automated solutions to further digitize and accelerate drug discovery and development with the aim of enhancing health outcomes and the patient experience.

Flexibility

We aim to create a trusting flexible workplace culture which encourages employees to achieve work life harmony attracts talent and enables everyone to be their best working start the conversation!

Equal Employment Opportunity

We believe that a diverse and inclusive workforce is crucial to building a successful business. As an employer Pfizer iscommitted to celebratingthisin all itsforms allowing for us to be as diverse as the patients and communities we serve. Together we continue to build a culture that encourages supports and empowers our employees.

Disability Inclusion

Our mission is unleashing the power of all our people and we are proud to be a disability inclusive employer ensuring equal employment opportunities for all candidates. We encourage you to put your best self forward with the knowledge and trust that we will make any reasonable adjustments to support your application and future career. Your journey with Pfizer starts here!

Pfizer endeavors to make accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process and/or interviewing please email This is to be used solely for accommodation requests with respect to the accessibility of our website online application process and/or interviewing. Requests for any other reason will not be returned.

To learn more about acceptable and prohibited uses of AI during the recruitment process please review our candidate AI-use guidelines available onPfizer Careers.

Information & Business Tech

Required Experience:

Senior IC

Employment Type : Full-Time
Experience: years
Vacancy: 1