Sr Lead, Cloud Security Engineering

Description

The company is a global provider of wealth management, asset servicing, asset management and banking services for individuals, families, corporations and institutions. It is listed on Nasdaq.

It has operated since 1889, has more than 135 years of financial experience and employs over 24,000 people. It serves demanding clients with modern technology and careful service.

This senior lead role keeps cloud environments secure, compliant and resilient, with a focus on Policy as Code (PaC) and Infrastructure as Code (IaC).

You will build security controls, use cloud security posture management (CSPM) tools, and work with the security champions on application development teams. You will also lead technically and mentor junior engineers.

The company offers a flexible, collaborative culture with financial stability, internal moves, accessible senior leaders and a commitment to an inclusive workplace.

Responsibilities

• Design, build and maintain security measures across cloud platforms, including third-party, open source and native services, mainly Azure and AWS.
• Write PaC and IaC in Terraform, and keep security policies and procedures current against CIS and NIST 800-53.
• Operate CSPM tools such as Wiz and Microsoft Defender for Cloud to continuously check, monitor and enforce controls.
• Advise security champions in each business unit on their specific security needs.
• Help shape the cloud security roadmap.
• Run regular security assessments, audits and reviews of cloud configurations.
• Investigate security incidents, perform root cause analysis and carry out fixes.
• Coach junior team members.

Requirements

• At least 3 years working in public cloud as an engineer or developer.
• At least 5 years as an engineer, developer or architect in IT, ideally in cybersecurity, plus 8-12 years of total IT experience.
• Strong Terraform skills for infrastructure as code.
• Python skills, or familiarity with Python-based DevOps tooling and automation frameworks.
• Deep experience with Git-based version control and CI/CD, such as GitHub Actions and GitHub Package Repository.
• A solid grasp of cloud security principles and of building security into development workflows.
• Practical knowledge of AWS, Azure or GCP and of cloud-native architectures.
• Hands-on use of integrated testing tools.
• Clear written and verbal communication for working with cross-functional teams.
• Experience with privileged access management and identity systems such as Azure Entra, Okta or Ping is a plus.
• A bachelor's degree in computer science, information management or a related field is preferred.
• Desired certifications: Azure Security Engineer Associate, AWS Certified Security Specialty, CISSP and CCSP.

Conditions

Base pay range: $114,500 - 194,700 USD, a good faith estimate.

You must be authorized to work in the U.S. now and in the future without employment-based visa sponsorship. The company will not sponsor U.S. work visas for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa.

Benefits

• Retirement benefits, including a 401k and a pension.
• Health and welfare benefits: medical, dental, vision, spending accounts and disability cover.
• Paid time off, parental and caregiver leave, life and accident insurance, and other voluntary and well-being benefits.
• A discretionary bonus program that may include an equity component.
• Opportunities to give time and talent to community causes, which is part of the company's culture.