Cloud Security Engineer, Sr

Overview Old National Bank has been serving clients and communities since 1834. With over $70 billion in total assets, we are a regional powerhouse deeply rooted in the communities we serve. As a trusted partner, we thrive on helping our clients achieve their goals and dreams, and we are committed to social responsibility and investing in our communities through volunteering and charitable giving. We continually seek highly motivated and talented individuals as our people are critical to our success. In return, we offer competitive compensation with our salary and incentive program, in addition to medical, dental, and vision insurance. 401K, continuing education opportunities and an employee assistance program are also included in our benefit suite. Old National also offers a variety of Impact Network Groups led by team members who are passionate about driving engagement, creating awareness of diverse backgrounds and experiences, and building inclusion across the organization. We offer a unique opportunity to join a growing, community and client-focused company that is firmly rooted in its core values. Responsibilities Salary Range: $98,400.00 / Yr. – $199,000.00 / Yr. The base salary indicated for this position reflects the compensation range applicable to all levels of the role across the United States. Actual salary offers within this range may vary based on a number of factors, including the specific responsibilities of the position, the candidate's relevant skills and professional experience, educational qualifications, and geographic location. Key Accountabilities Cloud Security Architecture & Engineering Design, implement, and maintain secure landing zones across AWS and Azure, using preventive guardrails to block deployment of security misconfigurations. Leverage cloud-native security services such as AWS: IAM, KMS, Secrets Manager, Service Control Policies, Security Hub, GuardDuty, CloudTrail, Config, WAF, Inspector, etc. and Azure: Azure AD, Defender for Cloud, Key Vault, Security Center, Sentinel, Policies, etc. Develop and enforce cloud security baselines, guardrails, and configuration standards. Support the creation and refinement of cloud control narratives that assert the security posture of our cloud landing zones. Implement deep observability to unify logs and metrics across multiple services to derive both real-time and historical insights. Cloud Identity & Access Management Develop, manage, and review complex IAM policies that define cross-account access patterns, ensuring adherence to the Principle of Least Privilege. Implement Just-in-Time access workflows that avoid long-lived credentials. Support emerging use cases for cloud with bespoke IAM identity and policies that maintain security posture and data privacy. Vulnerability & Threat Management Utilize enterprise security tools such as Tenable, Qualys, and Snyk to identify, prioritize, and remediate vulnerabilities across cloud workloads. Track and report security posture improvements. Integrate automated scanning into CI/CD pipelines. Secure SDLC & DevSecOps Integration Embed security early in the Secure Software Development Lifecycle (SSDLC). Partner with development teams to implement automated security testing. Integrate SAST, SCA, and IaC scanning tools into CI/CD pipelines. Infrastructure as Code & Automation Write, review, and maintain Terraform configurations for cloud resource deployment. Implement automated security controls and monitoring via IaC. Build and maintain secure-by-default Terraform modules that enforce least privilege, encryption, and compliance requirements. Monitoring, Detection, & Incident Response Develop and fine-tune cloud security monitoring using native and third‑party tools. Assist in cloud‑focused incident management/response, log analysis, forensics, and root cause investigations. Develop detective, preventive, and proactive controls to identify, prevent, and remediate security misconfigurations and anomalous activity. Governance, Risk, & Compliance Ensure cloud environments align with frameworks such as NIST, CIS Benchmarks, SOC2, and ISO27001. Perform continuous compliance checks using AWS Config, Azure Policies, Terraform policies (OPA), and scanning tools. Support internal and external cloud security audits. Key Competencies for Position Develops Talent – You own your development and career. Actively assess yourself by leveraging feedback to enhance knowledge, skills and behavior. Promotes Change – Actively seek information to understand rationale, implications, and impact for changes. Remain agile and quickly modify daily behavior. Strategy in Action – Break down larger goals into smaller achievable goals and communicate how they contribute to the broader goal. Compelling Communication – Effectively and transparently share information and ideas with others. Tailor the delivery of communication in a way that engages the audience. Makes Decisions & Solves Problems – Take ownership of problems and collaborate with others on a resolution. Delights Clients – Passionately serve internal/external clients with excellence. Leads Inclusively – Seek diverse relationships to learn more about people from other cultures and backgrounds. Personifies ONB Culture – Consistently demonstrate Old National's culture and values in daily interactions. Qualifications and Education Requirements 5-7+ years of experience in cloud security engineering or related roles. Deep practical knowledge of AWS and Azure security services. Proficiency with HashiCorp Terraform. Hands‑on experience with Tenable, Qualys, Snyk, or similar vulnerability/scanning tools. Expertise in observability and incident management. Strong understanding of identity and access management, network security and zero trust principles, encryption, key management, secrets management, and data privacy best practices. Experience implementing security practices in GitOps environments. Strong communication and documentation abilities. Collaborative mindset with a focus on partnering with engineering teams. Ability to manage multiple priorities and drive security initiatives independently. Preferred Qualifications Certifications such as AWS Security Specialty, Azure Security Engineer Associate, CISSP, CCSP, GIAC Cloud Security (GCSA/GCLD). Experience with policy‑as‑code frameworks (OPA/Rego, HashiCorp Sentinel). Experience with Platform‑as‑a‑Service and serverless services (AWS Lambda, DynamoDB, API Gateway, Azure Functions, etc.). Strong scripting skills (Python, Bash, PowerShell). Equal Opportunity Employer Old National is proud to be an equal opportunity employer focused on fostering an inclusive workplace and committed to hiring a workforce comprised of diverse backgrounds, cultures and thinking styles. As such, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, protected veteran status, status as a qualified individual with disability, sexual orientation, gender identity or any other characteristic protected by law. #J-18808-Ljbffr Old National Bank