Cloud Enablement Engineer (Azure, Kubernetes) Full Time Permanent

ORGANIZATION

Join one of the world’s leading providers of financial software solutions and services. With operations, clients and markets across the world, this vibrant community of tech-enthusiasts utilizes cutting edge technology, while offering ample opportunity for innovation and growth. The organization encourages entrepreneurship and recognizes and rewards achievement. They embrace and foster an environment that builds on the unique talents that come from a variety of people and perspectives.

THE POSITION

We are looking for a Cloud Security Engineer who specializes in Microsoft Azure environments to participate in a multidisciplinary information security team. The right individual will directly contribute to the execution of the firm’s technology transformation strategy, cloud architecture and assist in the design and implementation of security controls around cloud-based applications, across all types (including Infrastructure, Platform, and Software as a Service (IaaS/PaaS/SaaS).

WHAT WE OFFER 

• Leadership and autonomy
• Work with a team that believe people are their greatest asset and provided an environment where you can grow your career at a global scale.
• Work on new leading-edge project such as the new generation of mobile banking systems. Open collaboration and open finance supported by our open platform.
• Working with products that are used by thousands of financial institutions worldwide.
• Alongside amazing colleagues and engaging work, we want to help you get the best out of your career. We offer continuous learning and development to take your skills to the next level. It is not just about being the best you can be at work we also a variety benefits to make your non-work life better, including paid holiday, flexible working, pension, health and well-being initiatives and many more.

RESPONSIBILITIES

• Develop Cloud Security Controls Framework aligned to security frameworks CSA, CIS and NIST for multi-cloud environment.
• Design and develop security architectures for cloud and cloud/hybrid-based systems. Possess a firm understanding of the offerings within Microsoft Azure platforms and SaaS applications such as O365, Dynamics, etc.
• Work closely with enterprise architects to identify and mitigate risks, perform security reviews, design top tier security practices, and deliver strategic, innovative cloud based security offerings.
• Designing and Developing Cloud-specific security policies, standards and procedures e.g. Identity and Access Management (SSO, SAML), and Privilege Management, Firewall management, SSL/IPSec, Encryption Key Management (BYOK), Security incident and event management (SIEM), Data protection (DLP, encryption), Vulnerability Management in partnership with Infrastructure Services, and Application Development.
• Performing Cloud Security Assessments of Cloud platforms/environments using industry standard frameworks such as ISO, CSA-CSM and NIST.
• Executing on Cloud security engagements during different phases of the lifecycle assess, design, and implementation.
• Troubleshooting and resolving complex security issues in Microsoft Azure, applying fundamental systems security understanding, skills, expertise, and experience to support the planning, design, development, and implementation of complex systems
• Ensuring that relevant threat and vulnerability data is considered in support of security-relevant decisions.
• Providing input to analyses of alternatives and to requirements, engineering, and risk trade-off analyses to achieve a cost-effective security architectural design for protections that enable mission/business success.
• Providing the evidence necessary to support assurance claims and to substantiate the determination that the system is sufficiently trustworthy; and
• Conducting security risk management activities, producing related security risk management information, and advising the engineering team and key stakeholders on the security-relevant impact of threats and vulnerabilities to the mission/business supported by the system.

QUALIFICATION

The ideal candidate will have a strong foundation across Amazon Web Services (AWS), AWS security capabilities and the ability to communicate security and risk-related concepts to key stakeholders along with experience with the following:

• AWS services including but not limited to:

1. IAM
2. Detective & GuardDuty, Security Hub
3. CloudTrail, CloudWatch, CloudFormation
4. Key Management Service
5. EC2, S3, RDS, VPC, Route 53

• Identity and Access Management principals, including B2B and B2C cloud design and implementation
• Securing network and enterprise cloud applications
• Privileged access management technologies
• Strong understanding of security best practices and security frameworks, such as ISO/IEC 27001, NIST CSF, NIST 800-53 or OWASP
• Knowledge of host hardening, auditing, logging and monitoring, network security, SEIM deployments, security analytics, anomaly detections, PKI
• Market understanding of industry trends for cybersecurity, risk & threat intelligence, and governance
• Proven implementation of cloud security models, particularly identity, network, and encryption
• Demonstrated understanding of Microsoft security technologies and strategy
• Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM), network security) within SaaS, IaaS, PaaS, and other cloud environments
• Experience with Infrastructure as Code Automation (e.g. Ansible) and Automation Skills (PowerShell and/or Python, Java, or a similar language)
• Experience with perimeter security and firewall technologies (Cisco, Fortinet) preferred.
• Experience working with cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies
• Understanding of firewall concepts, security defense-in-depth, and the risk-based approach to security
• IT Systems Architecture/Infrastructure knowledge
• Experience supporting large and complex geographically distributed enterprise environments with 1000+ users
• Education and Experience:
• Bachelor’s degree from an accredited college or university, or equivalent experience. A degree in Computer Science, Computer/Data Systems Management or a related field or discipline is preferred but not required.
• Certification in one or more of the following areas is desired but not required: Microsoft Azure Certifications, Certified Information Security Professional (CISSP), Certified Cloud Security Professional (CCSP), GIAC Security Essentials Certification (GSEC), Certified Ethical Hacker (CEH), Certified Red Hat Engineer (RHCE)