Principal Cloud Security Engineer (Azure)

Principal Cloud Security Engineer (Azure)

Location- Merrimack NH, Durham NC or Westlake TX

The Role

As a Cloud Security Engineer, you will work within a diverse team comprised of passionate technologists who believe in the power of innovation and constant collaboration. We believe that small, empowered, self-motivated teams can achieve outstanding things. We are passionate about opensource contribution, sharing our expertise and knowledge with the engineering community while adopting a continuous learning approach supported by a dedicated learning day each week.

The Azure Security and Service Enablement squad is seeking a highly technical, hands-on security engineer with experience on large-scale and/or business critical Azure environments. On this squad, you will bring your cloud security skillset to a group of talented engineers that are continuously innovating and improving our capabilities to enable the acceleration of Fidelity’s journey to the cloud. You will work on a wide variety of cloud native stacks and technologies, leveraging cutting edge architectures and services. This squad is the starting point for all security capabilities, guardrail definition and service enablement for our Azure environment.

• Designing, scaling, and deploying various cloud security controls and services
• Building processes and workflows along with a consolidated and collaborative integration of IaaS, SaaS, and PaaS cloud services
• Ensuring seamless user experience with advanced security and compliance of our cloud infrastructure
• Maintaining and containing business risk as it pertains to the Azure cloud infrastructure
• Working across teams and Business Units to define requirements and deliver solutions
• Building comprehensive security controls to enforce policy
• Supporting business unit technologists deploying to the public cloud

The Expertise and Skills You Bring

• 5+ years of experience in IT infrastructure, security, compliance
• A strong understanding of Azure services and security capabilities
• Solid hands-on experience with at least two of the following:
• Engineering/operational support of cloud account configuration in AWS or Azure
• Software Development, Linux Systems Administration, Data Networking
• Hands-on configuration of CI/CD pipelines for cloud-native deployments
• Very strong with scripting languages, including integration with CSP APIs; python preferred
• Azure Networking
• Identity and Access Management - RBAC
• Azure Policies
• Azure Security Services - Security Center, Key Vault, Log Analytics
• Azure ARM/PowerShell
• Ability to work with application and security teams to promote a secure posture in the cloud
• You can mentor and train other team members to work effectively in the cloud
• You are a self-starter who can independently by reading technical documentation

Bonus skills

• Advanced Azure Certifications

The Team

This is an opportunity for a highly motivated Cloud Security Engineer to join Cloud And Platform Engineering (CAPE) and work in a diverse, open and transparent culture where you will contribute to powering the next generation of Fidelity’s digital services through innovative solutions using the latest cloud native technologies and leading-edge engineering practices.

Company Overview

At Fidelity, we are passionate about making our financial expertise broadly accessible and effective in helping people live the lives they want! We are a privately held company that places a high degree of value in creating and nurturing a work environment that attracts the best talent and reflects our commitment to our associates. We are proud of our diverse and inclusive workplace where we respect and value our associates for their unique perspectives and experiences. For information about working at Fidelity, visit FidelityCareers.com. Fidelity Investments is an equal opportunity employer.