Cloud Security SRE Senior

$100,402 - $158,080/Yr

Intermountain Health - West Valley City, UT

Full-time - Senior

West Valley City, UT

Hospitals

About the position

The Cloud Security Site Reliability Engineer (SRE) is responsible for managing security operations within Intermountain's cloud environment, infrastructure, applications, and platforms. This role involves designing, implementing, and managing cybersecurity controls and methods to facilitate cloud adoption while ensuring compliance with Intermountain's standards, governance, and regulatory requirements. The SRE will utilize tools such as Azure Policy, 'policy as code', Cloud Security Posture Management (CSPM), Entra ID / Privileged Identity Management (PIM), and other security tools to achieve these objectives. The SRE is expected to support enterprise standards and adhere to established security industry standards. This position requires a fully functioning professional with extensive experience in cybersecurity technologies and systems. The ideal candidate will work independently to produce results that meet quality, timeliness, and acceptability standards with minimal supervision. A passion for automation and a strong focus on security are essential, along with an embodiment of 'infrastructure as code' and 'policy as code' approaches. This is a full-time remote/hybrid position, and candidates from out-of-state may be considered where state laws permit. However, candidates requiring visa sponsorship will not be considered. The hiring level will be determined based on qualifications, with salary ranges varying for Senior and Consultant levels based on experience.

Responsibilities

• Develop and implement Azure Policy solutions to enforce governance, security, and compliance requirements for Azure resources.
• Collaborate with cross-functional teams including Cloud Ops, DevOps, and Cybersecurity Architecture to understand cyber standards and requirements and translate them into effective Azure Policy configurations.
• Design and implement custom policy definitions and initiatives based on organizational requirements.
• Assess and analyze existing Azure environments, identify security gaps, and provide recommendations for improvement.
• Automate policy enforcement and monitoring processes using Azure 'policy as code' including EPAC, PowerShell, Azure CLI, or other relevant tools.
• Aid in maintaining documentation related to Azure Policy standards, processes, and best practices.
• Provide technical guidance and mentorship to junior engineers on Azure Policy implementation and troubleshooting.
• Stay up to date with the latest Azure Policy features, updates, and industry trends, and evaluate their potential impact on the organization.
• Validate cybersecurity controls are being met while removing barriers to accelerate cloud adoption by DevOps teams.

Requirements

• Demonstrated experience in information systems/security technologies and systems.
• Demonstrated understanding of the eight CISSP domains.
• Demonstrated understanding of Cybersecurity methods and techniques of information systems.

Nice-to-haves

• Bachelor's degree in Computer Science, Information Systems, or technology-related field, or equivalent experience.
• Strong skills with Docker or container technologies.
• An understanding of Kubernetes, or AKS.
• Experience with GitHub, BitBucket, Wiz, ServiceNow, Atlassian, or any other industry proven CI/CD tool.
• Ability to effectively prioritize and execute tasks in a high-pressure environment is crucial.
• Advanced knowledge of performance, scalability and system architecture with an eye toward avoiding and reducing technical debt.
• Healthcare related software development and/or system administration experience.
• Knowledge of applicable data privacy practices and laws.
• Proven analytical and problem-solving abilities, along with ability to learn, understand, and apply new technologies.
• Strong written and verbal communication skills.
• Strong interpersonal and customer service skills.
• Highly self-motivated and directed.
• Keen attention to detail.
• Proven experience working in product driven environment.

Benefits

• Comprehensive benefits package covering a wide range of programs to foster a sustainable culture of wellness.
• Support for living healthy, happy, secure, connected, and engaged.