Infrastructure Engineer - Security & Compliance

Infrastructure Engineer - Security & Compliance Location New York Business Area Engineering and CTO Ref # 10051631 Description & Requirements About the Team The Global Corporate Technology Group is responsible for designing, deploying, and supporting Bloomberg’s enterprise IT systems. This includes our global corporate network plus all hardware, software and enterprise applications used by nearly 27,000 employees in 170 state-of-the-art offices worldwide. We focus on enterprise solutions, productivity tools, and IT systems integration which help move all of Bloomberg's businesses forward. The Corporate Technology – Finance (BLPF) team designs, implements, and operates security, data protection, and compliance controls that protect sensitive financial and employee data within highly regulated enterprise environment, The BLPF team acts as the engineering owner of the finance secure environment. Our mission is to ensure these systems operate with security and compliance framework while meeting strict regulatory and audit obligations such as SOX and PII. We design and run data protection, access control, monitoring, and audit controls that allow Finance, Accounting, Payroll and Tax teams to function at scale while maintaining the highest standards of confidentiality, integrity, and availability. The Role: This is not a traditional security advisory or policy team, BLPF is an engineering driven control function that designs, builds, operates and protects Bloomberg’s core financial operations. The scope includes: · Automate security application/system platform lifecycle-including provisioning, configuration, observability, testing, troubleshooting, and capacity planning · Write software utilizing orchestration systems to automate tasks and interact with other systems. · You will be responsible for implementing innovative technologies, automating workflows, and crafting CI/CD automation pipelines supporting Designing and operating system integrity and configuration and operational controls via Identify and Access management & Network Segmentation Monitoring user data access and user behavior to detect and report misuse or risk Supporting secure file transfer collaboration solution with Digital Rights Management, Manage Data Loss Prevention integration with Proxy, Email gateway and endpoints.You’ll Need to Have4+ years of experience supporting enterprise security, compliance, or data protection platformsDegree in Computer Science, Engineering, Mathematics, or a similar field of study, or equivalent work experience.Experience operating controls in regulated compliance or audit driven environmentsWorking knowledge of Github, Powershell or Python automation administration and securityWorking knowledge with monitoring and logging tools e.g., Grafana, Humio and Sumo Logic · Experience working with EntraID, MFA, SSO, SAML, and PING FederationExperience working with Windows, Linux administration operationUnderstanding security fundamentals standard control frameworks – NIST CSF, ISO/IEC 27001, SOC 2 and/or CIS controlsClear communication and ownership mindsetWe'd love to seeFamiliarity with security applications e.g., Forcepoint, Varonis, and Tripwire Familiarity with messaging and file sharing applications/systems e.g., Proofpoint, Blackberry Workspaces, MDM Boxer, and Globalscape Experience implementing network protocols, network administration and network security Familiarity with Infrastructure as Code ( IaC) e.g., Ansible, Chef, or Salt, Familiarity with Zero Trust architecture and conditional access models. Excellent written and verbal communication skills and the ability to work independentlySalary Range = 130,000 - 225,000 USD Annual + Benefits + BonusThe referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level. We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns. Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.