Senior Cloud Security Engineer

Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people’s lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us at www.acuityinc.com.

Job Summary

We are seeking an experienced and hands-on Senior Cloud Security Engineer to join our Product Security Architecture and Operations team. This role will help secure cloud applications and solutions hosted on Microsoft Azure by partnering closely with engineering teams to assess cloud architectures, monitor internal and external threats, and identify potential vulnerabilities across cloud and internal environments.

You will apply deep expertise in cloud security, Cloud-Native Application Protection Platforms (CNAPP), identity and access management, Kubernetes, Infrastructure as Code, and modern DevSecOps practices to proactively reduce risk across infrastructure, workloads, identities, APIs, and application delivery pipelines.

This is a high-impact role for a security engineer who can translate risk into practical engineering guidance, embed automated controls into delivery workflows, and strengthen secure-by-design and Zero Trust practices across cloud-native platforms.

Key Tasks & Responsibilities (Essential Functions)

• Lead security architecture reviews for Microsoft Azure applications, platforms, and services, identifying risks and recommending pragmatic, risk-based remediation strategies.
• Drive CNAPP capabilities across Cloud Security Posture Management (CSPM), Cloud Workload Protection Platforms (CWPP), Cloud Infrastructure Entitlement Management (CIEM), and Kubernetes and container security.
• Assess identity and access architectures using Microsoft Entra ID and other identity providers, including Okta, and guide teams on secure authentication, federation, single sign-on, and least-privilege access for users and workloads.
• Review and strengthen the use of Microsoft Entra service principals, Azure managed identities, workload identities, privileged access, and identity entitlement controls.
• Evaluate security controls for AKS and Kubernetes environments, including image hardening, admission and runtime controls, secrets handling, network segmentation, and workload protection.
• Review Infrastructure-as-Code implementations using Terraform, ARM, and Bicep, and identify insecure resource configurations before deployment.
• Assess service-to-service and API communication patterns, including authentication, authorization, encryption, secrets management, and trust boundaries.
• Partner with engineering squads to integrate automated security checks and risk-based deployment gates into CI/CD pipelines.
• Drive adoption of SAST, DAST, Software Composition Analysis, container image scanning, and IaC scanning across the software delivery lifecycle.
• Implement and improve policy-as-code guardrails that evaluate infrastructure configurations and deployment requests against defined security requirements, including risk-based enforcement and approved exception handling.
• Monitor cloud security findings and threat signals, support prioritization and remediation, and help teams improve security posture over time.
• Contribute to cloud security standards, reference architecture patterns, reusable controls, assessment templates, and engineering guidance.
• Clearly document and communicate security findings, business impact, recommendations, and remediation plans to technical and non-technical stakeholders.
• Promote secure-by-design and Zero Trust principles through practical enablement, architecture guidance, and collaboration across engineering, architecture, operations, and product teams.

Skills and Minimum Experience Required

• 5–8 years of experience in cloud security, product security, security architecture, DevSecOps, or related engineering roles.
• Proven experience leading secure architecture reviews and strengthening cloud security across infrastructure, workloads, identities, Kubernetes, application pipelines, APIs, and service-to-service communications.
• Strong hands-on experience with Microsoft Azure security capabilities and cloud-native security architecture.
• Experience with one or more leading CNAPP platforms, such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework.
• Practical experience across CNAPP capabilities, including CSPM, CWPP, CIEM, Kubernetes security, container security, vulnerability management, and runtime protection for virtual machines, containers, and serverless workloads.
• Strong knowledge of Microsoft Entra ID and familiarity with other identity providers such as Okta, including authentication, federation, SSO, service principals, managed identities, workload identity, and least-privilege access.
• Experience reviewing and securing AKS or Kubernetes environments, container images, registries, workloads, and runtime configurations.
• Hands-on experience reviewing Infrastructure as Code using Terraform, ARM, Bicep, or equivalent technologies.
• Experience securing APIs and service-to-service communication patterns, including identity, authorization, encryption, secrets, and network controls.
• Experience integrating security controls into CI/CD pipelines using automated testing, scanning, policy checks, deployment gates, and exception workflows.
• Working knowledge of SAST, DAST, Software Composition Analysis, container image scanning, IaC scanning, and policy-as-code.

Preferred Skills and Experience

• Experience developing or maintaining cloud security standards, reusable control patterns, reference architectures, security assessment methods, or governance frameworks.
• Exposure to cloud threat detection, vulnerability prioritization, incident response, or continuous cloud security posture improvement.
• Demonstrated ability to understand business direction, long-term technology vision, and risk when developing strategic technical security solutions.
• Ability to influence engineering teams through practical enablement, architecture alignment, actionable remediation guidance, and continuous improvement.
• Relevant Azure or security certifications, such as Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Cybersecurity Architect Expert, or equivalent credentials.

We value diversity and are an equal opportunity employer.  All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law.

Please click here and here for more information.

Accommodation in the Application Process: Acuity Inc. is an equal opportunity employer. It complies with the Americans with Disabilities Act (ADA) and other applicable laws requiring reasonable accommodation of persons with disabilities in employment. This includes the provision of reasonable accommodation in the application process. If you believe you need reasonable accommodation to assist with our online application system or any aspect of the application process, please contact Human Resources at (770) 922-9000, and select option 4.

Please be prepared to identify the requisition / position applied for and the aspect of the application process for which you believe accommodation is needed. The company will engage in an interactive process with you to better understand the request and to determine whether reasonable accommodation is needed and available.

Any unsolicited resumes sent to Acuity Inc. from a third party, such as an Agency recruiter, including unsolicited resumes sent to an Acuity Inc. mailing address, fax machine or email address, directly to Acuity Inc. employees, or to Acuity Inc. resume database will be considered Acuity Inc. property. Acuity Inc. will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Acuity Inc. will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor, but does not have the appropriate approvals to be engaged on a search.

E-Verify Participation Poster

e-verify.gov

eeoc.gov

Protecting Yourself from Recruitment Scams: Acuity is committed to maintaining the integrity of our Talent Acquisition process and the security of our candidates. We are aware of phishing and fraudulent schemes in which individuals impersonate Acuity representatives or recruiting partners to solicit payments or sensitive personal information.

As you navigate your job search, please keep the following in mind:

No Financial Requests: Acuity will never ask candidates for payment, credit card information, banking details or other financial information during the interview process.

Verify Recruiter Communications: Legitimate communications from Acuity recruiters will come from an “@acuityinc.com” email address. If you are contacted by a recruiting agency regarding a role with Acuity, the agency should clearly identify itself and its relationship to Acuity. If you suspect any suspicious activity, verify the agency legitimacy by contacting +1 877-584-1411, option# 0.

Be Alert for Suspicious Activity: Exercise caution if you receive unsolicited outreach with unusual requests, grammatical errors, requests for personal or financial information, or pressure to act quickly. Always verify the sender before sharing information or clicking links.

Report Suspected Fraud: If you receive a suspicious message or believe someone is impersonating Acuity or one of our recruiting partners, please contact +1 877-584-141, option# 0, report the incident to the FTC at ReportFraud.ftc.gov, or to your state attorney general.