Cloud Security DevOps Engineer

Cloud Security Engineer

Enterprise Technology is a global organization within Transamerica. We provide dedicated application support to Transamerica, and we bring all of Aegon's business units together through the use of technology. We provide the backbone - the infrastructure - for how everything works. We're creating the company's AI environment, building a flexible 'cloud experience' for internal hosting services, designing frameworks for data governance and management, and ensuring the security and stability of the company's technology. In short, we enable the business units to move more quickly and deliver to our clients in the best possible way. Whether customers are interested in insurance products or annuities or financial services, we're here to ensure they don't have to worry whether their information is safe.

The Cloud Security Engineer role is part of the Cloud Security Engineering function and is responsible for ensuring the secure design and delivery of Cloud solutions to the Application teams in the Enterprise (internal customers), based on customer requirements. A Security Engineer is responsible for delivering architecture guidance and educating the Application teams and Cloud COE (amongst others) to design, build and implement secure coding and continuous security practices for infrastructure and applications. This role will specialize in all aspects of information security management as well as business and regulatory compliance using Cloud services in large-scale computing environments with a global Enterprise.

What You Will Do:

• Assists in implementation of Security Standards, based on organization's Security policy and IT organization, with guidance from a senior members and senior Security stakeholders
• Advises on implementation of basic security standards and controls for Cloud solutions
• Assists with implementation of standardized solutions to facilitate the secure access for one product or Application in the Cloud environment
  • SIEM and Audit Logging (CloudTrail & Config)
  • Management of Security Groups and ACLs, Perimeter security with WAF and Shield DDoS
  • Data-in-Transit / Certificate Management, Data-at-Rest / Key/Secret Management
• Assists with design and building of highly available, cost efficient, fault tolerant, and scalable distributed systems
• Familiar with AWS design principles and Security best practices and industry standards for security
• Assists with implementation Cloud Architecture solutions, based on defined security standards for the Enterprise - from an Application and Infrastructure perspective
• Assists with regular testing and scanning of Cloud products and application customers to provide compliance with overall security standards
• Assists with delivery of Cloud security patterns and implementations based on customer requirements
• Educates Cloud COE team and other Application teams across the Enterprise to design and implement secure coding and continuous security practices within their applications

What You Will Need:

• Bachelor's degree in computer science or related degree, or equivalent education/experience
• Two years of relevant experience including one year supporting enterprise-level platform installations
• Ability to give and receive feedback as part of a cohesive agile team
• Flexibility and adaptability to change, and continuous learning mindset
• Customer focused
• Decision making and problem solving skills

Preferred

• AWS Associate DevOps or Architect
• Familiar with / basic understanding of working in an Agile/Scrum
• Familiar with / basic knowledge of Cloud computing technologies
• Familiarity with AWS Well Architected Framework and Cloud migration industry standards and best practices
• Prior programming background in at least ONE language: C++, Java, Python, Ruby, etc.; Python preferred
• Familiar with / basic understanding of container technologies - Kubernetes, Docker, AWS EKS, Azure AKS, etc.
• Technical writing skills for documenting environments and procedures
• Familiar with basic industry compliance and security standards
• Familiar with basic infrastructure automation and continuous delivery technologies
• Ability to think outside the box
• AWS Cloud Practitioner (mandatory)

Working Conditions

• Normal office working conditions or opportunity for hybrid work.
• Collaboration with global remote teams may require work outside of standard office hours.
• Occasional travel for conferences, meetings and training.

Compensation

The Salary for this position generally ranges between $94,000 - $105,000 annually. Please note that the salary range is a good faith estimate for this position and actual starting pay is determined by several factors including qualifications, experience, geography, work location designation (in-office, hybrid, remote) and operational needs. Salary may vary above and below the stated amounts, as permitted by applicable law.

Additionally, this position is typically eligible for an Annual Bonus based on the Company Bonus Plan/Individual Performance and is at the Company's discretion.

Applicants must possess legal authorization to work for our company in the U.S. without the need for immigration, sponsorship or otherwise serving as an employer of record for immigration employment purposes. At this time, this role is not eligible for immigration-related employment authorization sponsorship.

This is a hybrid position requiring three days in office per week in one of our hub locations (Cedar Rapids, Denver, Philadelphia). Relocation assistance will not be provided for this position.

What You Receive:

• A Comprehensive Wealth + Health package.
• Wealth Benefits; Competitive Pay, Bonus, and Benefits Package
• Health and Work/Life Balance Benefits

Our commitment to inclusion & diversity means that we value differences. We encourage the unique perspectives of persons and are dedicated to creating a respectful and inclusive work environment.