Cloud Security Engineer (Hybrid/Remote)

$83,200 - $214,560/Yr

Umb Financial Corporation - Kansas City, MO

Full-time - Mid Level

Hybrid - Kansas City, MO

Credit Intermediation and Related Activities

About the position

The Cloud Security Engineer will serve as a subject matter expert in cloud security, supporting UMB's Infrastructure team in delivering secure cloud solutions. This role involves defining and executing security controls, advising on secure cloud infrastructure, and providing operational support for information security solutions. The position is hybrid, requiring on-site presence on Tuesdays and Wednesdays for candidates in the Kansas City area, while also being open to qualified remote candidates across the US.

Responsibilities

• Define and execute public cloud-centric security controls.
• Design secure patterns for computing, storage, networking, operational, and security domains.
• Advise application, product, and cloud infrastructure teams on incorporating cloud infrastructure capabilities with an information security mindset.
• Collaborate with cloud stakeholders to deliver best-fit secure solutions for UMB.
• Identify emerging cloud infrastructure services and needs to meet business requirements.
• Deploy, consult, and manage security controls leveraging AWS solutions.
• Partner with application teams to support design and implementation of infrastructure-as-code stacks.
• Advise on all aspects of secure cloud infrastructure offerings and solution design.
• Provide hands-on technical coaching to accelerate cloud security learnings across the organization.
• Serve as a consultant to the IT Information Security organization to solve business use cases.

Requirements

• Bachelor's Degree in Management Information Systems, Computer Science or related field OR equivalent work experience.
• At least 4 years of experience designing and implementing secure solutions and securing public cloud workloads.
• At least 2 years of experience with Metrics, Events, Logging, and Tracing solutions like Cloudtrail, CloudWatch, or Splunk.
• Strong infrastructure-as-code (IaC) expertise and deployment experience with technologies such as Terraform or AWS CloudFormation.
• In-depth experience with automation methodologies, processes improvement, and development of CI/CD pipelines.
• Demonstrated knowledge/experience with at least 2 scripting languages like Python, PowerShell, AWS/Azure CLI, Ansible, and Bash.
• Hands-on experience deploying and operating AWS computer instances (EC2), AWS Storage Services (EBS/S3/Glacier), AWS multi-accounts environment, IAM Policies, AWS Tower, AWS Config, and Service Control policies (SCP).
• Demonstrated knowledge with configuration management and pipeline automation with AWS DevOps, Jenkins, Git or similar offering.
• Knowledge with container technologies, such as Docker, Kubernetes, AWS EKS and ECS.
• Collaborated with service providers and partners.
• Working knowledge and expertise with common enterprise-grade security solutions.

Nice-to-haves

• Experience with Amazon GuardDuty, AWS Shield, and Amazon Inspector services.
• AWS Solutions Architect Associate certification.
• AWS Certified Security - Specialty certification.
• CompTIA Cloud+ certification.
• Certified Cloud Security Professional (CSSP) certification.
• Certificate of Cloud Security Knowledge (CCSK) certification.
• GIAC Cloud Security Automation (GCSA) certification.
• Previous experience working within the banking or financial industry.

Benefits

• Paid Time Off
• 401(k) matching program
• Annual incentive pay
• Paid holidays
• Comprehensive company sponsored benefit plan including medical, dental, vision, and other insurance coverage
• Health savings, flexible spending, and dependent care accounts
• Adoption assistance
• Employee assistance program
• Fitness reimbursement
• Tuition reimbursement
• Associate wellbeing program
• Associate emergency fund
• Various associate banking benefits