Cloud Security Consultant

Cloud Security Consultant (6+ Month Remote Contract) 

BCG (Boston Consulting Group), USA

POSITION OVERVIEW

BCG (Boston Consulting Group) is seeking a Cloud Security Consultant to join their Secure Infrastructure Platform product portfolio. This 6+ month remote contract role will focus on secrets management, cloud security, and automation within a global environment.

KEY RESPONSIBILITIES:

As a Security Engineer, you will:

Implement and manage HashiCorp Vault and other secrets management solutions to enhance security practices across BCGs infrastructure.

Strengthen Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP) to mitigate risks in AWS, Azure, and GCP environments.

Automate security processes using Terraform, Python, PowerShell, and CI/CD pipelines, ensuring infrastructure efficiency and scalability.

Collaborate with developers to drive best practices for secrets management across global teams.

Maintain cloud security architecture, including encryption key management and certificate lifecycle management.

Work in an Agile framework to deliver security solutions efficiently.

Create and maintain architecture and training documentation.

Review monthly status reports and security metrics.

REQUIRED SKILLS & EXPERIENCE

1️ HashiCorp Vault & Secrets Management (Primary Focus)

• 2+ years of experience managing HashiCorp Vault in large-scale global implementations.
• Expertise in secrets management, encryption key management, and certificate lifecycle management.
• Familiarity with Azure Key Vault and other secure credential storage solutions.

2️ Cloud Security & Architecture

• 5+ years of experience in Cloud Security build and implementation across AWS, Azure, and GCP.
• Deep understanding of Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWP).
• Proficiency in cloud security best practices, including WAF, Load Balancers, VPC Flow Logs, EKS, and Lambda.

3️ Automation & DevOps

• Strong experience with Infrastructure as Code (IaC) using Terraform, Python, PowerShell, or similar scripting languages.
• Hands-on experience with CI/CD pipelines and GitHub (or similar tools like Chef, Puppet).
• Knowledge of containerization technologies such as Kubernetes and Docker.

ADDITIONAL SKILLS & QUALIFICATIONS

Strong knowledge of cryptography controls and security best practices.

Experience working in global, Agile environments, managing competing priorities.

Excellent stakeholder management, negotiation, and consensus-building skills.

BA degree in Computer Science, Information Security, or a related field (preferred).

Relevant security certifications (e.g., CISSP, CCSP, SABSA, ITIL) are a plus.

YOULL WORK WITH

You will collaborate with a global team across Europe, Asia, and the Americas, working in a highly dynamic and innovative security environment. This is an exciting opportunity to shape security engineering practices at BCG while working on cutting-edge cloud security solutions.