Senior Cloud Security Engineer

Responsibilities: Cloud DevOps Engineering & Automation:

• Develop infrastructure-as-code (IaC) automation (e.g., Terraform) to manage and support highly secured cloud patterns within Northern Trusts secure enclave for system administration.
• Utilize modern software DevOps and CI/CD tooling, such as GitHub, GitHub Actions, ADO, Jenkins, etc., to provision infrastructure resources and prevent configuration drift. 
• Collaborate with development teams to ensure seamless continuous integration of code and deployment as well as promoting disciplined code versioning practices.
• Familiarity and experience with Terraform Cloud for workspace and state management.
• Collaborate with product, architecture, and other stakeholders to ensure cloud technologies are designed in accordance with product roadmaps and well architected frameworks.
• Investigate and resolve complex cloud infrastructure related issues and recommend and develop solutions to issues and create documentation of reengineering processes as required.
• Participate in IT Service Management (ITSM) change, incident, and general requests for cloud platform support for business as usual (BAU) operations.
• Contribute to cloud operation disciplines and improve processes and own such as OS lifecycle management, backup and recovery, disaster recovery, certificate management, etc.

Network Engineering

• Manage firewall technologies such as Azure Front Door, Checkpoint FW, Illumio, Akamai WAF/CDN via automation and possess networking fundamentals to identify root causes of application connectivity issues.
• Support cloud network security platforms and collaborate with tool vendors across WAF/CDN (e.g., Akamai, Azure Front Door, etc.), DNS Management, and load balancing,
• Design, develop, and implement automation workflows for network firewalls to enhance security protocols and integrate firewall management within the broader security strategy.
• Proficient in APIs to construct REST requests to accomplish a task given API documentation.
• HTTP response codes and can Identify the parts of an HTTP response.

Security Engineering

• Support Azure Conditional access and Entra ID synchronization partnering with MS AD team which runs EASE environment.
• Develop, implement, and enforce Policy-as-Code (PaC) for cloud environments (Azure, AWS) to configure, detect, remediate, and enforce security standards.
• Define and implement security policies based upon CIS/NIST industry benchmarks.
• Support remediation of security vulnerabilities using cloud posture management and ITSM tooling in accordance with service level agreements (SLA)
• Manage, configure, enhance, and operate cloud security posture management platforms (e.g., Wiz, Prisma Cloud, etc.) for pre-deployment scanning of IaC code to protect infrastructure.

Minimum Qualifications

• Bachelors degree in computer science, engineering, or related technical fields
• 10+ years of technology experience
• 4 to 8+ years cloud computing (Microsoft Azure, AWS)
• 3 to 5+ years cloud networking automation
• Terraform Infrastructure as code automation