Director of Cloud Security Engineering AWS

***Position is bonus eligible***

Prestigious Financial Institution is currently seeking a Director of Cloud Security Engineering with strong AWS experience. Candidate will be involved and directly leading key areas or our critical projects related to Cloud Services across both AWS and Azure as well as our tool integration and security architectural reviews. Candidate will have strong attention to detail, be motivated to collaborate with stakeholders across Security and IT teams and keep current on regulatory/compliance demands on our company.

Responsibilities:

• Provide expert knowledge to the organization and stakeholders regarding the status, goals, functionality, and progression of Security Objectives
• Understand and be able to relay complex IaC, Cloud, and Application Security information as a subject matter expertise
• Provide senior level leadership to a broad team of engineers, consultants, and staff across the organization.
• Manage complex deliverables across security and information technology teams to ensure we meet our timelines, goals, and requirements.

• Provide detailed status updates using industry tools such as Jira, Confluence, ServiceNow
• Develop staff to including training, mentorship, and functional alignment with our critical service delivery for Amazon Web Services, Azure, and security tool implementation
• Ensure teams are focused on prioritized work to enable our delivery of these key services

Qualifications:

• Good consultative, communication, team player and analytical skills are a must, as you will be regularly interacting between various teams.
• Relevant experience managing multiple teams across different technology spectrums.
• Self-motivated to remain informed on current and emerging trends and security best practices
• Ability to work within a fast-paced environment with short timelines and work well under pressure.
• Understanding of AWS and Azure security reference architecture
• Understanding of DevOps and DevSecOps including current industry leading services and systems
• Subject Matter Expertise on full development lifecycle processes, requirements, and security considerations
• Application security experience and understanding of code scanning, remediation processes, and capabilities

Technical Skills:

• Deep Understanding of cloud services (AWS / Azure)
• AWS Proficiencies
• Lambda
• Security Hub
• Control Tower
• AWS Networking Models
• AWS Multi-Account Relationships
• AWS IAM Roles, Policies, Permissions
• AWS Authentication Mechanisms
• AWS Network Firewall
• AWS Firewall Manager
• Azure Proficiencies
• Conditional Access
• PIM – Privileged Identity Management
• Multi-factor Authentication
• Entra ID (Formerly Azure AD)
• Azure Subscriptions and Permissions
• Event Hub
• Azure Security Policies
• M365 Authentication
• Azure AD Sync
• DevOps Proficiencies
• Terraform / TFE
• Hashi Vault
• EKS / Kubernetes
• Container Methodology
• Service Mesh
• Jenkins
• Rancher
• Application Security Proficiencies
• Blackduck
• Veracode
• Understanding of GitOps / Gitlab / Github
• Deep understanding of CI/CD processes and methodologies

Advanced degree, preferably in a technical discipline (Computer Science, Engineering, Mathematics, etc.) and relevant IT systems experience in PKI, or equivalent combination of education and experience required

CISSP, Cloud Based Certifications and PKI Foundational certifications are a strong plus.