Our client is a global IT supporter that provides infrastructure services, information security and global/corporate application support.
We are looking for a Senior Cloud Security DevOps Engineer who will work closely with the Identity Access Management teams and business units across the company.
Responsibilities
- Work to implement security standards that align with the organizations security policy and IT infrastructure under the guidance of the product owner and security stakeholders.
- Guide the implementation of security standards and controls for Cloud solutions.
- Collaborate on the implementation of standardized solutions to ensure secure access for products or applications within the Cloud environment.
- Identity and Access Management (IAM), Identity Federation / SSO
- SIEM and Audit Logging (CloudTrail & Config)
- Management of Security Groups and ACLs, Perimeter security with WAF and Shield DDoS
- Data-in-Transit / Certificate Management, Data-at-Rest / Key/Secret Management
- Design and build fault-tolerant and scalable distributed systems, adhering to AWS design principles and Security best practices.
- Leverage AWS security services such as Security Hub and GuardDuty to enhance threat detection and response capabilities.
- Collaborate on the implementation of Cloud Architecture solutions, ensuring adherence to defined security standards across the Enterprise, encompassing both application and infrastructure perspectives.
- Conduct regular testing and scanning of Cloud products and applications to ensure compliance with security standards.
- Mentor, teach, and guide junior team members on engineering practices and technical tasks.
- Deliver advanced Cloud security patterns and implementations based on customer requirements.
- Educate teams across the Enterprise on secure coding and continuous security practices within their applications.
Qualifications
- Familiarity with Agile/Scrum methodologies.
- Advanced understanding of Cloud computing technologies.
- Knowledge of AWSs Well-Architected Framework and Cloud migration industry standards.
- Prior programming experience in at least one language (e.g., C++, Java, Python, Ruby).
- Experience with IAM in AWS and Azure, and familiarity with tools such as Sailpoint, CyberArk, Azure AD, Octa, Conjure, or similar.
- Experience with a suite of AWS Security services (e.g. Security Hub, GuardDuty, Inspector, etc.)
- Proficiency in security solutions like WAF, IPS, and anti-DDOS systems.
- Strong technical writing skills for documenting environments and procedures.
- Familiarity with industry compliance and security standards.
- Knowledge of continuous security practices and IT compliance and risk management requirements. (e.g. security, privacy, SOX, etc.)
- Understanding of encryption in-flight and at-rest practices.
- Experience with infrastructure automation and continuous delivery technologies. (e.g. Terraform, CloudFormation etc.)
- Experience with enterprise security packages, identity management, and federation systems.
- Knowledge of Cloud Security Posture Management (CSPM) frameworks.
- Strategic thinking ability to address business, product, and technical challenges.
- Ownership mindset with a high sense of urgency and entrepreneurial spirit.
- Ability to think outside the box and approach problems with multiple solutions.
- AWS Cloud Practitioner (mandatory)
- At least 1 AWS Certification at Associate or higher.
Preferred Qualifications
- AWS Associate DevOps
- AWS Associate Architect
- AWS Certified Cloud Security Specialist
- CompTIA Security +
What they offer
- Competitive salary
- Comprehensive health package
- Brand new office at an excellent location
- Hybrid working
- Opportunities for growth and advancement
- A highly people-centric, positive, and supportive work environment