Info Security Engineer II - Cloud Platform Security Engineer

Description

The company is building its cloud platform security capability, and this role sits on the Identity and Access Management (IAM) Cloud Platform Security Engineering team.

The team supports the company's move to the cloud. Its main work is building reusable patterns, templates and automation for cloud deployments, and it also helps move on-premises systems into the cloud.

The company wants someone with working knowledge of Azure, AWS and/or GCP, plus IAM or information security experience and a background in IT or security engineering.

Responsibilities

• Design, build and maintain secure cloud infrastructure across Azure, AWS and GCP.
• Work with application, infrastructure and security teams to move workloads to the cloud and apply sound security practices.
• Create and maintain reusable Infrastructure as Code (IaC) using Terraform, CloudFormation, ARM/Bicep or Ansible.
• Write automation and scripts that enforce IAM governance, compliance and security controls.
• Review current cloud architectures and improve their security, scalability, reliability and operational efficiency.
• Build and support CI/CD pipelines for IaC and Policy as Code.
• Evaluate new cloud services and set secure implementation standards and reference architectures for them.
• Investigate and fix complex issues involving cloud security, identity and infrastructure, and push for ongoing improvement.

Requirements

• At least 3 years of experience managing and securing cloud environments in Azure, AWS or GCP.
• Hands-on experience with Terraform, CloudFormation, ARM/Bicep, Ansible or similar IaC tools.
• Strong scripting and automation skills in Python, PowerShell, Bash or related languages.
• Experience building and supporting CI/CD pipelines, automation frameworks and DevSecOps practices.
• Knowledge of IAM, including authentication, authorization and cloud security best practices.
• Experience with Microsoft Entra ID, Active Directory, Conditional Access, PIM, SSO or AWS IAM Identity Center.
• Familiarity with CyberArk, HashiCorp Vault or other privileged access and secrets management tools.
• Experience supporting Windows, Linux, containerized workloads and cloud-native platforms, with strong troubleshooting skills.
• Beneficial, in one or more of these areas:
• Administering and engineering Microsoft Entra ID and related Microsoft cloud identity services, including Conditional Access, Privileged Identity Management (PIM), Microsoft Entra Connect and Single Sign-On (SSO).
• Administering AWS IAM Identity Center.
• Administering and engineering Active Directory Domain Services (AD DS).
• Administering Windows and Linux operating systems and containerized workloads.
• Working with HashiCorp Vault, CyberArk or other secrets management and privileged access management (PAM) tools.
• Working with database administration and access provisioning.

Conditions

You will work from a the company location three (3) or more days per week.

Accommodations for a disability are available during the application and hiring process.

Benefits

• Healthcare covering medical, dental and vision.
• Basic term life insurance, plus optional term life insurance.
• Short-term and long-term disability coverage.
• Pregnancy disability and parental leave.
• 401(k) plan and an employer-funded retirement plan.
• Paid vacation of two to five weeks, depending on salary grade and tenure.
• Up to 11 paid holiday opportunities.
• Adoption assistance.
• Sick and safe leave accrues at one hour for every 30 hours worked, up to 80 hours per calendar year unless the law provides otherwise.