Lead Cloud Security Engineer

About the position

Mercury Financial is an innovative and growing financial services company with locations in both Austin, TX and Wilmington, DE. Our mission is to help customers build and maintain their financial future by offering them credit cards they can afford and understand. After only a few years, we've had great success building a significant credit card program, but we are aiming higher, which means we have lots of challenging problems for you to help us solve. Come onboard, work with some of the most talented individuals who thrive on collaboration and teamwork; and help us continue to build something special.

Responsibilities

• Design, implement, and manage secure cloud network infrastructures in AWS, including Transit Gateways, VPC peering, and hybrid network architectures.
• Configure and troubleshoot BGP routing between AWS and on-premises data centers or co-location environments.
• Work closely with security and DevOps teams to implement security controls, guardrails, and automated enforcement across cloud networks.
• Develop and maintain infrastructure-as-code (IaC) and automation scripts (e.g., Terraform, CloudFormation, Python, Bash) to enforce network and security standards.
• Manage and monitor Linux and Windows servers, ensuring integration with Active Directory and centralized authentication systems.
• Collaborate on the design and enforcement of zero-trust network architectures, least privilege principles, and segmentation strategies.
• Support cloud security posture management (CSPM) and participate in incident response and vulnerability remediation related to network infrastructure.
• Contribute to disaster recovery planning, cross-region failover strategies, and business continuity for networked systems.
• Stay current on evolving cloud networking technologies, security threats, and industry best practices.

Requirements

• 7+ years of hands-on experience in cloud and hybrid network engineering roles.
• Strong experience with AWS networking services, including Transit Gateway, VPC, Direct Connect, VPN, and Route 53.
• In-depth knowledge of BGP, routing protocols, and WAN connectivity concepts.
• Experience working with Linux and Windows Server environments, including Active Directory and Group Policy.
• Hands-on experience with network security concepts such as firewalls, NAC, ACLs, IDS/IPS, and secure tunneling (IPSec, TLS).
• Proficiency in automation and scripting (e.g., Python, Bash, Terraform, CloudFormation).
• Familiarity with cloud security tools and practices including CSPM, IAM, and network monitoring solutions.
• Excellent problem-solving, communication, and documentation skills.

Nice-to-haves

• AWS certifications (e.g., AWS Certified Advanced Networking, Security).
• Experience with hybrid Active Directory environments, Azure AD, and federated authentication.
• Familiarity with container networking (e.g., ECS, EKS), service meshes, and microsegmentation.
• Exposure to security compliance frameworks such as PCI DSS, CIS Benchmarks, NIST, ISO 27001, or FedRAMP.
• Experience with monitoring and SIEM platforms (e.g., Splunk, AWS CloudWatch).

Benefits

• Employer insurance coverage for employee & dependents
• Life insurance
• 401K with generous employer match
• Wellness program
• Monthly Company Events
• Hybrid Work Model