Cloud Security Engineer (Hybrid/Remote)

$83,200 - $214,560/Yr

Umb Financial Corporation - Nashville, TN

Full-time - Mid Level

Hybrid - Nashville, TN

Credit Intermediation and Related Activities

About the position

As a Cloud Security Engineer at UMB, you will act as the cloud security subject matter expert, supporting the Infrastructure team in delivering secure cloud solutions. This role emphasizes a cloud-native approach, ensuring that security controls are effectively integrated into cloud services while balancing security and risk. You will provide operational support for Information Security solutions and collaborate with various teams to design secure patterns across computing, storage, networking, and operational domains. Your expertise will be crucial in advising teams on secure cloud infrastructure and implementing best practices to safeguard UMB's technology environment.

Responsibilities

• Define and execute public cloud-centric security controls.
• Design secure patterns for computing, storage, networking, operational, and security domains.
• Advise application, product, and cloud infrastructure teams on incorporating cloud capabilities with an information security mindset.
• Collaborate with cloud stakeholders to deliver secure solutions for UMB.
• Identify emerging cloud infrastructure services to meet business requirements.
• Deploy and manage security controls using AWS solutions such as multi-accounts structure and IAM policies.
• Support application teams in designing infrastructure-as-code stacks using technologies like Terraform and CloudFormation.
• Advise on secure cloud infrastructure offerings and solution design.
• Provide hands-on technical coaching to enhance cloud security knowledge across the organization.
• Consult on AWS services to solve business use cases.

Requirements

• Bachelor's Degree in Management Information Systems, Computer Science, or related field, or equivalent work experience.
• At least 4 years of experience designing and implementing secure solutions for public cloud workloads.
• At least 2 years of experience with Metrics, Events, Logging, and Tracing solutions like CloudTrail, CloudWatch, or Splunk.
• Strong infrastructure-as-code (IaC) expertise with technologies such as Terraform or AWS CloudFormation.
• In-depth experience with automation methodologies and CI/CD pipeline development.
• Knowledge of at least 2 scripting languages like Python, PowerShell, AWS/Azure CLI, Ansible, and Bash.
• Hands-on experience deploying and operating AWS services such as EC2, EBS, S3, IAM Policies, and AWS Config.
• Knowledge of configuration management and pipeline automation with AWS DevOps, Jenkins, or Git.
• Experience with container technologies like Docker, Kubernetes, AWS EKS, and ECS.
• Collaborative experience with service providers and partners.
• Expertise in common enterprise-grade security solutions.

Nice-to-haves

• Experience with Amazon GuardDuty, AWS Shield, and Amazon Inspector services.
• Certifications such as AWS Solutions Architect Associate, AWS Certified Security - Specialty, CompTIA Cloud+, CSSP, CCSK, or GCSA.
• Previous experience in the banking or financial industry.

Benefits

• Paid Time Off
• 401(k) matching program
• Annual incentive pay
• Paid holidays
• Comprehensive company-sponsored benefit plan including medical, dental, vision, and other insurance coverage
• Health savings, flexible spending, and dependent care accounts
• Adoption assistance
• Employee assistance program
• Fitness reimbursement
• Tuition reimbursement
• Associate wellbeing program
• Associate emergency fund
• Various associate banking benefits