Cloud security engineer

Acuity Inc. (NYSE: AYI) is a market-leading industrial technology company. We use technology to solve problems in spaces, light and more things to come. Through our two business segments, Acuity Brands Lighting (ABL) and Acuity Intelligent Spaces (AIS), we design, manufacture, and bring to market products and services that make a valuable difference in people’s lives.

We achieve growth through the development of innovative new products and services, including lighting, lighting controls, building management solutions, and an audio, video and control platform. We focus on customer outcomes and drive growth and productivity to increase market share and deliver superior returns. We look to aggressively deploy capital to grow the business and to enter attractive new verticals.

Acuity Inc. is based in Atlanta, Georgia, with operations across North America, Europe and Asia. The Company is powered by approximately 13,000 dedicated and talented associates. Visit us at www.acuityinc.com.

Work location: This position may be based anywhere in the United States and includes travel as part of the responsibilities.

Job Summary

We're seeking a Cloud Security Engineer to join the product security team and help secure our cloud applications and solutions within Microsoft Azure infrastructure. Working closely with engineering teams, you will assess cloud architectures, monitor internal and external threats, and analyze potential vulnerabilities across internal and cloud environments.

The role requires strong expertise in Cloud security, CNAPP, and modern DevSecOps practices, with a focus on proactively reducing risk across infrastructure, workloads, and application pipelines.

Key Tasks & Responsibilities (Essential Functions)

Cloud Security Architecture & CNAPP

• Lead secure design and architecture reviews for cloud-native and distributed systems, including IoT-integrated platforms
• Experience with leading CNAPP platforms such as Microsoft Defender for Cloud, Prisma Cloud, Wiz, Orca Security, or Lacework etc. Consequently, ability to drive Cloud-Native Application Protection Platform (CNAPP) capabilities, including:
• CSPM (Cloud Security Policies & Posture management)
• CWPP (Runtime protection for VMs, Containers, Serverless applications)
• CIEM (Identity entitlement and Least privilege Enforcement)
• Kubernetes and container security (AKS, image hardening, runtime controls)
• Experience assessing identity and access architectures using Microsoft Entra ID and other identity providers, such as Okta, and guiding engineering teams on secure authentication, federation, single sign-on (SSO), and least-privilege access for users and workloads, including Microsoft Entra service principals and Azure managed identities.
• Experience with reviewing the architecture and security controls for:
• AKS/Kubernetes environments
• Infrastructure-as-Code (Terraform, ARM, Bicep)
• Service-to-service and API communication patterns

DevSecOps & Automation

Collaborate with engineering squads on integrating automated security checks and risk-based deployment gates into CI/CD pipelines to identify and address security risks before deployment.

Drive adoption of:

• Application security testing: Static application security testing (SAST) for source code, Dynamic application security testing (DAST) against running applications in authorized test environments, and Software composition analysis (SCA) for open-source dependencies and known vulnerabilities.
• Container image scanning for known vulnerabilities and image configuration issues, and infrastructure-as-code (IaC) scanning for insecure resource configurations before deployment.
• Policy-as-code guardrails that evaluate infrastructure configurations and deployment requests against defined security requirements, with risk-based enforcement and approved exception handling.

Security Governance & Enablement — Preferred Exposure (Not Required)

Basic familiarity with cloud security standards, reference architecture patterns, and reusable security controls; exposure to contributing to their development or maintenance is a plus.

Exposure to supporting cloud security posture improvements and helping development teams strengthen their security practices.

Foundational understanding of secure-by-design and Zero Trust principles; exposure to communicating related security recommendations across teams is a plus.

Preferred Skills and Experience

• Effectively document and communicate security assessment findings, recommendations, and remediation strategies to a diverse audience, including technical teams and non-technical business stakeholders, ensuring clarity and actionable guidance for all parties involved.
• Demonstrable ability to analyze business direction and problems, understand long term vision and risk in developing strategic technical solutions.
• Azure Security Certifications are a plus

The range for this position is $120,800.00 to $261,000.00 USD. Placement within this range may vary, depending on the applicant’s experience and geographic location. Acuity offers generous benefits including health care, dental coverage, vision plans, 401K benefits, and commissions/incentive compensation depending on the role. For a list of our benefits, click here.

We value diversity and are an equal opportunity employer. All qualified applicants will be considered for employment without regards to race, color, age, gender, sexual orientation, gender identity and expression, ethnicity or national origin, disability, pregnancy, religion, covered veteran status, protected genetic information, or any other characteristic protected by law.

Please click here and here for more information.

Accommodation in the Application Process: Acuity Inc. is an equal opportunity employer. It complies with the Americans with Disabilities Act (ADA) and other applicable laws requiring reasonable accommodation of persons with disabilities in employment. This includes the provision of reasonable accommodation in the application process. If you believe you need reasonable accommodation to assist with our online application system or any aspect of the application process, please contact Human Resources at (770) 922-9000, and select option 4. Please be prepared to identify the requisition / position applied for and the aspect of the application process for which you believe accommodation is needed. The company will engage in an interactive process with you to better understand the request and to determine whether reasonable accommodation is needed and available.

Any unsolicited resumes sent to Acuity Inc. from a third party, such as an Agency recruiter, including unsolicited resumes sent to an Acuity Inc. mailing address, fax machine or email address, directly to Acuity Inc. employees, or to Acuity Inc. resume database will be considered Acuity Inc. property. Acuity Inc. will NOT pay a fee for any placement resulting from the receipt of an unsolicited resume.

Acuity Inc. will consider any candidate for whom an Agency has submitted an unsolicited resume to have been referred by the Agency free of any charges or fees. This includes any Agency that is an approved/engaged vendor, but does not have the appropriate approvals to be engaged on a search.

E-Verify Participation Poster e-verify.gov

eeoc.gov