Cloud Security Engineer

Description

The firm is a diversified trading firm with over 30 years of experience. It trades on its own capital and at its own risk, across Fixed Income, ETFs, Equities, FX, Commodities and Energy in major global markets, and has also moved into real estate, venture capital and cryptoassets.

The firm is headquartered in Chicago, with offices in the U.S., Canada, Europe and Asia.

The team works with respect, curiosity and open minds, and holds high expectations for integrity and innovation, and is willing to challenge consensus.

The role supports technologists across business units in delivering secure cloud infrastructure and cloud-integrated solutions. You will set base guidelines and global standards for secure cloud development, implement controls, and review architecture in a repeatable, automatable way, so the firm's overall cloud footprint stays as secure as possible.

Responsibilities

• Review and audit AWS, GCP and Azure environments across several business units, and recommend changes that reduce risk and improve security.
• Support development and work with technologists across the firm to bring cloud security efforts together.
• Connect services and access paths in a data-intensive hybrid cloud environment.
• Advise on and support secure deployment of cloud and Kubernetes environments, covering role-based access, workload identity, network policies, secrets, container images, admission policies, runtime protection, logging and monitoring.
• Recommend secure hybrid cloud designs and build working examples of them.
• Help business units move software designed for on-premise use to the right cloud technologies, securely.
• Keep up with changes in cloud technology, security, services and networking.
• Evaluate vendors and their products, recommend options to the firm, and educate internal clients.
• Understand technologies that work across both cloud and on-premise deployments, such as user-supported authorization.
• Find and analyze vulnerabilities, and work with business units to fix them.
• Continuously review and improve cloud privilege models so access to data and services is least privilege.
• Respond to security incidents.

Requirements

• A bachelor's degree or relevant work experience.
• Relevant cloud certifications are a plus.
• Strong knowledge of cloud encryption, including key management with KMS, HSM and similar tools.
• 5+ years working with Amazon Web Services, with exposure to Google Cloud Platform and Microsoft Azure.
• Strong command of infrastructure-as-code tools such as Terraform, CloudFormation and related technologies.
• Proficient with containers and Kubernetes on Linux, including Kubernetes architecture, workloads, networking, managed services, security configuration assessment, vulnerability remediation, and automated guardrails built with infrastructure-as-code and policy-as-code.
• Proficient in at least one programming language, such as Python, Go or JavaScript.
• Experience automating in the cloud and using loosely coupled serverless services such as Lambda, SQS, API Gateway and DynamoDB.
• Knowledge of cloud security best practices and cloud-based controls.
• Familiarity with security considerations, capabilities and regulatory compliance for services across cloud providers.
• Working knowledge of networking in hybrid cloud environments.
• Must work well in a fast-paced, dynamic environment, with a strong work ethic and initiative.
• Proven ability to troubleshoot and resolve production problems and make sound decisions under pressure.
• Excellent verbal and written communication, and strong documentation and knowledge management skills.

Conditions

The annual base salary is $150,000 USD to $200,000 USD, depending on experience, qualifications and relevant skill set.

The role is eligible for an annual discretionary bonus.

The company is an equal opportunity employer.

Benefits

• Group medical, pharmacy, dental and vision insurance.
• 401k with discretionary employer match.
• Short and long-term disability, life and AD&D insurance.
• Health savings accounts and flexible spending accounts.