Cloud Security Engineer (Hybrid/Remote)

$83,200 - $214,560/Yr

Umb Financial Corporation - Des Moines, IA

Full-time - Mid Level

Hybrid - Des Moines, IA

Credit Intermediation and Related Activities

About the position

As a Cloud Security Engineer at UMB, you will act as the cloud security subject matter expert, supporting the Infrastructure team in delivering secure cloud solutions. Your role will involve defining and executing security controls, advising teams on secure cloud practices, and providing operational support for information security solutions. You will collaborate with various stakeholders to ensure that security measures are effectively integrated into cloud infrastructure, while also mentoring and coaching team members on cloud security best practices.

Responsibilities

• Define and execute public cloud-centric security controls.
• Design secure patterns for computing, storage, networking, operational, and security domains.
• Advise application, product, and cloud infrastructure teams on incorporating cloud infrastructure capabilities with an information security mindset.
• Collaborate with cloud stakeholders to deliver best-fit secure solutions for UMB.
• Identify emerging cloud infrastructure services and needs to meet business requirements.
• Deploy, consult, and manage security controls leveraging AWS solutions.
• Partner with application teams to support design and implementation of infrastructure-as-code stacks.
• Advise on all aspects of secure cloud infrastructure offerings and solution design.
• Provide hands-on technical coaching to accelerate cloud security learnings across the organization.
• Provide accurate and current information on AWS services to solve business use cases.

Requirements

• Bachelor's Degree in Management Information Systems, Computer Science or related field OR equivalent work experience.
• At least 4 years of experience designing and implementing secure solutions and securing public cloud workloads.
• At least 2 years of experience with Metrics, Events, Logging, and Tracing solutions like Cloudtrail, CloudWatch, or Splunk.
• Strong infrastructure-as-code (IaC) expertise and deployment experience with technologies such as Terraform or AWS CloudFormation.
• In-depth experience with automation methodologies, processes improvement, and development of CI/CD pipelines.
• Demonstrated knowledge/experience with at least 2 scripting languages like Python, PowerShell, AWS/Azure CLI, Ansible, and Bash.
• Hands-on experience deploying and operating AWS computer instances (EC2), AWS Storage Services (EBS/S3/Glacier), AWS multi-accounts environment, IAM Policies, AWS Tower, AWS Config, and Service Control policies (SCP).
• Demonstrated knowledge with configuration management and pipeline automation with AWS DevOps, Jenkins, Git or similar offering.
• Knowledge with container technologies, such as Docker, Kubernetes, AWS EKS and ECS.
• Collaborated with service providers and partners.
• Working knowledge and expertise with common enterprise-grade security solutions.

Nice-to-haves

• Experience with Amazon GuardDuty, AWS Shield, and Amazon Inspector services.
• Certifications such as AWS Solutions Architect Associate, AWS Certified Security - Specialty, CompTIA Cloud+ Certified Cloud Security Professional (CSSP), Certificate of Cloud Security Knowledge (CCSK), GIAC Cloud Security Automation (GCSA).
• Previous experience working within the banking or financial industry.

Benefits

• Paid Time Off
• 401(k) matching program
• Annual incentive pay
• Paid holidays
• Comprehensive company sponsored benefit plan including medical, dental, vision, and other insurance coverage
• Health savings, flexible spending, and dependent care accounts
• Adoption assistance
• Employee assistance program
• Fitness reimbursement
• Tuition reimbursement
• Associate wellbeing program
• Associate emergency fund
• Various associate banking benefits