Security Engineer

· Manage and execute cloud security solutions across lifecycle strategy, design, implementation, and operations

· Participate, lead, and jointly deliver security evaluation reports on cloud providers (Azure, AWS, GCP), cloud native platforms (PCF, Docker, Kubernetes, etc.), and Software as a Service solutions

· Establish security requirements for cloud-based solutions by evaluating business strategies and requirements, researching cloud infrastructure security standards

· Provide domain expertise in both public and private cloud and enterprise technology

· Identify and deliver appropriate controls based on industry standards (e.g., CCM) to drive cloud and customer security solutions framework based on business risk and cloud native threats

· Continually evaluate new threats in the cloud, to identify the impact on IT and Business to develop and implement security controls

· Provide recommendations for improvement and risk reduction by assessing clients’ cloud security posture; and act as a change agent with customer organizations to oversee the vulnerability improvements with our clients’ existing IT staff as well as 3rd party vendors support our clients (most often managed IT service providers)

· Knowledge and understanding of key differences between most popular cloud provider solutions and cloud orchestration tools (e.g., Azure, AWS, GCP, Pivotal Cloud Foundry, BOSH, Kubernetes, Docker, etc.)

· Strong domain expertise of cloud infrastructure compute, network, and storage as well as the cloud control plane

· Knowledge of virtualization, containers, service-mesh, and enterprise service business

· Experience with structured Enterprise Architecture practices, hybrid cloud deployments, and on-premises-to-cloud migration deployments

· Ability to identify and drive remediation of public and hybrid cloud risks

· Experience in designing, implementing, and delivering security for cloud native, distributed computing, and architectural solutions with a principle of “Secure by Design”

· Expertise in performing Threat Modeling, generating security architectural requirements to software development and product teams

· 5+ years of full-time dedicated experience leading Cloud Security focused roles on delivering security on cloud native, distributed architectural solutions in complex environments

· 3+ years of experience in defining security standards and reference architectures used to guide technical resources in secure system implementation and configuration for enterprise cloud systems and consumption of public cloud

· Familiarity with predominant public cloud providers (AWS, Azure, GCP)

· Understanding of Industry trends in cloud technologies for public, private and hybrid cloud deployment