Job description

The Cloud Security Engineer – FAB supports the security, resilience, and compliance of FAB (Foundation and Beyond) , Wolters Kluwer’s centralized GenAI platform. This role focuses on cloud‑native security controls, DevSecOps automation, and operational security , ensuring that FAB services and workloads are protected throughout their lifecycle. FAB operates as a shared internal platform used by multiple product teams in regulated environments. As a result, this role emphasizes secure cloud configuration, identity and access management, vulnerability management, and security monitoring , working closely with FAB engineering, platform operations, and audit teams. Key Responsibilities Cloud & Infrastructure Security Implement and maintain cloud security controls across FAB environments, aligned with WK policies and FAB’s shared responsibility model. Support secure configuration of cloud resources, including network security, encryption, logging, and monitoring. Assist in securing hybrid and multi‑cloud FAB deployments supporting platform runtime and integrations. Identity, Access & Least Privilege Support identity and access management (IAM) practices for FAB, including least‑privilege access, workspace isolation, and secure API access patterns. Assist with configuration and review of authentication and authorization mechanisms used by FAB services and integrations. Participate in access reviews and remediation activities as part of security and audit readiness. DevSecOps & Secure SDLC Contribute to DevSecOps pipelines by supporting automated security checks such as SAST, dependency scanning, IaC scanning, and DAST. Help triage, track, and remediate security findings generated by CI/CD and cloud security tools. Partner with engineering teams to ensure security requirements are addressed early in the development lifecycle. Vulnerability Management & Operational Security Support vulnerability management activities, including review, prioritization, and remediation tracking for FAB assets. Assist with operational security improvements such as monitoring, alerting, and security logging. Participate in incident response support and root‑cause analysis under established FAB and */dxg processes. Compliance, Audit & Assurance Support Support SOC 2, HIPAA, and other compliance activities by assisting with evidence collection, control validation, and audit preparation. Participate in security reviews, penetration testing coordination, and follow‑up remediation activities. Help maintain documentation related to security controls, procedures, and operational readiness. Required Qualifications Experience in cloud security, DevSecOps, or infrastructure security in a cloud‑native environment. Hands‑on exposure to security controls such as IAM, encryption, logging, vulnerability scanning, and network security. Familiarity with CI/CD pipelines and automated security tooling. Ability to work collaboratively with engineering and platform teams in a fast‑moving environment. Strong attention to detail and willingness to learn security practices in regulated environments. Our Interview Practices To maintain a fair and genuine hiring process, we kindly ask that all candidates participate in interviews without the assistance of AI tools or external prompts. Our interview process is designed to assess your individual skills, experiences, and communication style. We value authenticity and want to ensure we’re getting to know you—not a digital assistant. To help maintain this integrity, we ask to remove virtual backgrounds and include in-person interviews in our hiring process. Please note that use of AI-generated responses or third-party support during interviews will be grounds for disqualification from the recruitment process. Applicants may be required to appear onsite at a Wolters Kluwer office as part of the recruitment process. Compensation: $102,600.00 - $179,250.00 USD This role is eligible for Bonus. Compensation range listed is based on primary location of the position. Actual base salary offer is influenced by a wide array of factors including but not limited to skills, experience and actual hiring location. Your recruiter can share more information about the specific offer for the job location during the hiring process. Additional Information : Wolters Kluwer offers a wide variety of competitive benefits and programs to help meet your needs and balance your work and personal life, including but not limited to: Medical, Dental, & Vision Plans, 401(k), FSA/HSA, Commuter Benefits, Tuition Assistance Plan, Vacation and Sick Time, and Paid Parental Leave. Full details of our benefits are available upon request.

Requirements

Must-haves

Cloud & Infrastructure Security
Implement and maintain cloud security controls across FAB environments, aligned with WK policies and FAB’s shared responsibility model.
Support secure configuration of cloud resources, including network security, encryption, logging, and monitoring.
Assist in securing hybrid and multi‑cloud FAB deployments supporting platform runtime and integrations.
Identity, Access & Least Privilege
Support identity and access management (IAM) practices for FAB, including least‑privilege access, workspace isolation, and secure API access patterns.
Assist with configuration and review of authentication and authorization mechanisms used by FAB services and integrations.
Participate in access reviews and remediation activities as part of security and audit readiness.
DevSecOps & Secure SDLC
Contribute to DevSecOps pipelines by supporting automated security checks such as SAST, dependency scanning, IaC scanning, and DAST.
Help triage, track, and remediate security findings generated by CI/CD and cloud security tools.
Partner with engineering teams to ensure security requirements are addressed early in the development lifecycle.
Vulnerability Management & Operational Security
Support vulnerability management activities, including review, prioritization, and remediation tracking for FAB assets.
Assist with operational security improvements such as monitoring, alerting, and security logging.
Participate in incident response support and root‑cause analysis under established FAB and */dxg processes.
Compliance, Audit & Assurance Support
Support SOC 2, HIPAA, and other compliance activities by assisting with evidence collection, control validation, and audit preparation.
Participate in security reviews, penetration testing coordination, and follow‑up remediation activities.
Help maintain documentation related to security controls, procedures, and operational readiness.
Experience in cloud security, DevSecOps, or infrastructure security in a cloud‑native environment.
Hands‑on exposure to security controls such as IAM, encryption, logging, vulnerability scanning, and network security.
Familiarity with CI/CD pipelines and automated security tooling.
Ability to work collaboratively with engineering and platform teams in a fast‑moving environment.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

apici/cdai

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Parental Leave