Cloud Security Engineer (Hybrid/Remote)

$83,200 - $214,560/Yr

Umb Financial Corporation - Kansas City, MO

Full-time - Mid Level

Kansas City, MO

Credit Intermediation and Related Activities

About the position

The Cloud Security Engineer will serve as a subject matter expert in cloud security, supporting UMB's Infrastructure team in delivering secure cloud solutions. This role involves defining and executing security controls, advising on secure cloud infrastructure, and providing operational support for information security solutions. The position is hybrid, requiring on-site presence in Kansas City on Tuesdays and Wednesdays, while also being open to qualified remote candidates within the US.

Responsibilities

• Define and execute public cloud-centric security controls.
• Advise application, product, and cloud infrastructure teams on incorporating cloud infrastructure capabilities with an information security mindset.
• Collaborate with cloud stakeholders to deliver best-fit secure solutions for UMB.
• Deploy, consult, and manage security controls leveraging AWS solutions.
• Partner with application teams to support design and implementation of infrastructure-as-code stacks.
• Advise on secure cloud infrastructure offerings and solution design.
• Provide hands-on technical coaching to accelerate cloud security learnings across the organization.
• Serve as a consultant to the IT Information Security organization to solve business use cases.

Requirements

• Bachelor's Degree in Management Information Systems, Computer Science or related field OR equivalent work experience.
• At least 4 years of experience designing and implementing secure solutions and securing public cloud workloads.
• At least 2 years of experience with Metrics, Events, Logging, and Tracing solutions like Cloudtrail, CloudWatch, or Splunk.
• Strong infrastructure-as-code (IaC) expertise and deployment experience with technologies such as Terraform or AWS CloudFormation.
• In-depth experience with automation methodologies, processes improvement, and development of CI/CD pipelines.
• Demonstrated knowledge/experience with at least 2 scripting languages like Python, PowerShell, AWS/Azure CLI, Ansible, and Bash.
• Hands-on experience deploying and operating AWS computer instances (EC2), AWS Storage Services (EBS/S3/Glacier), AWS multi-accounts environment, IAM Policies, AWS Tower, AWS Config, and Service Control policies (SCP).
• Knowledge with configuration management and pipeline automation with AWS DevOps, Jenkins, Git or similar offering.
• Knowledge with container technologies, such as Docker, Kubernetes, AWS EKS and ECS.

Nice-to-haves

• Experience with Amazon GuardDuty, AWS Shield, and Amazon Inspector services.
• AWS Solutions Architect Associate certification.
• AWS Certified Security - Specialty certification.
• CompTIA Cloud+ certification.
• Certified Cloud Security Professional (CSSP) certification.
• Certificate of Cloud Security Knowledge (CCSK) certification.
• GIAC Cloud Security Automation (GCSA) certification.
• Previous experience working within the banking or financial industry.

Benefits

• Paid Time Off
• 401(k) matching program
• Annual incentive pay
• Paid holidays
• Comprehensive company sponsored benefit plan including medical, dental, vision, and other insurance coverage
• Health savings, flexible spending, and dependent care accounts
• Adoption assistance
• Employee assistance program
• Fitness reimbursement
• Tuition reimbursement
• Associate wellbeing program
• Associate emergency fund
• Various associate banking benefits