--- title: "Dedicated Cloud Security Engineers for AWS, Azure or GCP" description: "Cloud security engineers lock down identity, networks and configuration across your accounts. Hire one for your team, with a delivery manager on our side." url: "https://azendo.co/services/dedicated-cybersecurity-team/cloud-security-engineer/" --- 1. [Home](https://azendo.co/) 2. [Services](https://azendo.co/services/) 3. [Cybersecurity](https://azendo.co/services/dedicated-cybersecurity-team/) 4. Cloud Security Engineer # Dedicated cloud security engineers for your offshore team. Offshore cloud security engineers in Chiang Mai and Bangkok, working full time on your product and managed by us. A cloud security engineer makes sure the people, services and networks in your cloud accounts can reach only what they need, and that the setup stays that way. One fixed monthly fee. We employ the specialists, manage them day to day and keep their training current. [Contact us](https://azendo.co/get-in-touch/) [See pricing](https://azendo.co/pricing/) Part of our service line [Cybersecurity](https://azendo.co/services/dedicated-cybersecurity-team/) This role is part of a dedicated cybersecurity team. It's [staff augmentation](https://azendo.co/blog/engagement-models/staff-augmentation/), fully managed: take one role on its own, or the whole area as one delivery team. ## One Cloud Security Engineer, assigned to your product and fully managed. We assign a Cloud Security Engineer to your team full time and run everything around them: a service delivery manager who oversees delivery, training and coaching, the office and equipment, and HR and payroll. The price below is for a junior Cloud Security Engineer; other levels are priced in your proposal, and [how the monthly fee is built](https://azendo.co/pricing/) explains the arithmetic. From price One junior Cloud Security Engineer, full time, everything below included. All 27 things included ›› * Cloud security engineer From **USD 2,400** per month * Service We manage and develop the team * A service delivery manager who oversees operations and delivery * A 1:1 with our Head of Delivery every two weeks * Weekly delivery scoring and monthly capacity reports * A Talent Success Manager for every team member * HR We are the employer * Recruitment and technical assessment * Employment contracts * Salary and payroll * Tax and social security * Facilitation We provide the workplace * A desk in our office in Chiang Mai or Bangkok * A Workplace Experience Manager on site * Team events through the year * IT support * Equipment We supply the tools * Laptop and hardware * Software licences * LinkedIn Learning access * Device security and management ## What a Cloud Security Engineer does on a dedicated cybersecurity team. They work in your cloud accounts and infrastructure code under your access controls, with your platform and DevOps engineers. Security changes ship the same way every other change ships. ### Cloud Security Engineer skills and technologies * [AWS](https://azendo.co/skills/aws/) * [Azure](https://azendo.co/skills/azure/) * [GCP](https://azendo.co/skills/gcp/) * [IAM](https://azendo.co/skills/iam/) * [VPC and networking](https://azendo.co/skills/vpc-and-networking/) * [Terraform](https://azendo.co/skills/terraform/) * [Kubernetes](https://azendo.co/skills/kubernetes/) * [Trivy](https://azendo.co/skills/trivy/) * [HashiCorp Vault](https://azendo.co/skills/hashicorp-vault/) * [threat modelling](https://azendo.co/skills/threat-modelling/) * [audit logging](https://azendo.co/skills/audit-logging/) * [Cloudflare](https://azendo.co/skills/cloudflare/) * Least-privilege identity and access, from human users to service accounts and CI roles. * Network design and segmentation, so a single exposed service can't reach everything behind it. * Configuration reviews against recognised benchmarks, with fixes written as infrastructure code instead of console clicks. * Encryption, key management and logging set up so an incident can be investigated afterwards. * Kubernetes and container security, from image scanning to runtime permissions. ## Cloud Security Engineer seniority levels. Junior to senior. Cloud permissions are easy to get wrong in ways that stay invisible until they matter, so experience across several cloud estates pays off. Choose the level with that in mind when you read how the monthly fee is built. ## When your team needs a Cloud Security Engineer. Assigned when a cloud estate has grown faster than its access rules, after a security review flags misconfigurations, or ahead of an audit. Pairs with a DevSecOps engineer who keeps the same rules in the pipeline, as part of [a dedicated cybersecurity team](https://azendo.co/services/dedicated-cybersecurity-team/). It is a targeted addition for companies that [hire a dedicated development team](https://azendo.co/hire-a-dedicated-development-team-in-thailand/) on AWS, Azure or GCP. ## What we look for in a dedicated Cloud Security Engineer. We look for engineers who think in permissions and blast radius. They read an IAM policy the way a developer reads code, and they prefer a reviewed Terraform change to a quick fix in the console. ## A remote Cloud Security Engineer's first three months on your team. 1. Weeks 1 to 2Reviewing your accounts, identities, networks and logging against a benchmark, and ranking the findings. 2. Weeks 3 to 6Fixing the highest risks first, as infrastructure code, starting with access and exposed services. 3. Months 2 to 3Setting guardrails so new resources start secure, and owning cloud security reviews for new work. From USD 2,400 Per month for a junior cloud security engineer, fully managed 160 h Typical monthly capacity for this role Fixed The same fee every month 4 weeks Time to hire, from signing Weekly Delivery scores from you every Friday ## Other roles in cybersecurity. [Security Engineer Cybersecurity role](https://azendo.co/services/dedicated-cybersecurity-team/security-engineer/)[Penetration Tester Cybersecurity role](https://azendo.co/services/dedicated-cybersecurity-team/penetration-tester/)[DevSecOps Engineer Cybersecurity role](https://azendo.co/services/dedicated-cybersecurity-team/devsecops-engineer/) Cloud security engineers from Azendo work in your accounts with only the access you grant. Chiang Mai and Bangkok, Thailand · UTC+7 ## Questions about adding a Cloud Security Engineer to your team. Which clouds do you work with? AWS, Azure and GCP, and the Kubernetes clusters running on them. We match the engineer to the cloud you use today. Every change is made in your infrastructure code and your accounts, under your access rules. Will the engineer have admin access to our cloud? Only what the work needs, granted by you and reviewable at any time. Changes go through your infrastructure code and pull requests, so they are reviewed and logged like any other change. You can revoke access whenever you choose. ## Add remote cloud security engineers to your team. Tell us which clouds you run, how access is managed and whether a review or audit has flagged anything. We'll suggest the level of engineer that fits and send the fixed monthly fee. [Contact us](https://azendo.co/get-in-touch/) [How it works](https://azendo.co/how-it-works/) ## Tell us what your cloud security engineer would work on.