Security Engineer

Cloud Security Engineer - Risk Reduction

Role Summary


We are looking for an experienced Cloud Security Engineer to drive the remediation of our public cloud platforms (GCP, Azure and AWS). In this role, you will own the resolution of many critical issues already identified and prioritized in our cloud footprint, working either directly to solve the issues at stakes or coordinating infrastructure and engineering team to achieve this goal. You will work at the intersection of cloud resources, backend systems, networking, and data engineering to deliver scalable security solutions.

Key Responsibilities
• Cloud Issues Remediation: Develop and execute mitigation plans to address high-priority issues in GCP, Azure or AWS. This will typically involve updating Terraform repositories and/or scripting the remediation steps to fix the same issue in multiple projects.
• Secrets Management: Coordinate the rotation of mismanaged cloud secrets which can only be done by the end users (engineering or infrastructure teams).
• Addressing Root Cause: While your main goal will be fixing existing cloud resources, you will need to address the root cause to avoid the issues from reoccurring in future deployments
• Validation: You will be responsible to validate that the issues has been effectively remediated - either directly by you - or your partner teams.

Qualifications (About You)
• Experience: 5+ years of Cloud Engineering experience with a 4-year degree (or equivalent experience). GCP is a must-have.
• Technical Depth: Strong proficiency in cloud engineering, traditional infrastructure and automation (infrastructure-as-Code, Scripting, CI/CD etc.)
• Problem Solving: Ability to design new testing methods and resolve complex technical issues with minimal assistance.
• Architecture: Ability to navigate the current architecture and repositories to understand the context of the issues at stake. Ability to anticipate problems and/or possible outages in the proposed remediation plans.
• Communication: Clearly communicates Agile concepts to partners and demonstrates a commitment to team priorities.
• Continuous Learning: Stays current with evolving technologies via formal training and self-directed education.

Required Technical Skills
• Language: 5+ years writing automation pipelines and/or scripts for GCP specifically.
• Infrastructure-as-Code: at least 3+ years writing production Terraform code in a complex environment (e.g. >100 GCP projects)
• Infrastructure: Proficiency with on-prem and cloud networking (SDN). Strong understanding of core infrastructure components on-prem and in the cloud: compute, storage, databases, IAM etc.


Nice-to-Have:
• Experience with Azure or AWS
• Experience with Github or Atlantis
• Experience with Cloud Security specifically
• Mix of infrastructure and security background