Senior Security Engineer, GCP IAM

$92,700 - $203,940/Yr

CVS Health - Cumberland, RI

Full-time - Mid Level

Cumberland, RI

Health and Personal Care Retailers

About the position

The Security Engineer - GCP Identity & Access Management (IAM) is a critical member of the Technology Services & Solutions organization, leading the public cloud IAM capabilities in GCP across all CVS Health's footprints. This person will partner closely with Information Security, various departments in Technology Services & Solutions and application development teams as well as Enterprise Product and Digital organizations to deliver secure GCP IAM environments that are recognized as industry best in class models. The Security Engineer will participate in defining strategic vision and roadmaps to implement GCP IAM solutions, drive operational excellence, standardization, and drive workforce strategy with an emphasis on talent development and retention.

Responsibilities

• Design, develop, automate, and test Identity and access management procedures used to provision role-based access across GCP environments.
• Drive GCP IAM program governance, objectives, implement solutions, define standards and policies to continually advance a secure IAM adoption program.
• Work on secure system solutions to meet evolving threat landscape and risks while balancing impacts to the CVS technology organizations.
• Incorporate security into the DevOps and software development lifecycles through consistent communications and secure automation.
• Coordinate comprehensive GCP IAM security testing and analysis to identify opportunities for CVS to improve its overall IAM maturity.
• Assist in leading all GCP IAM efforts to align with CVS regulatory compliance, contractual obligations and make recommendations for improvement.
• Drive towards adoption of GCP IAM policies and control standards.
• Thorough understanding of GCP IAM technologies with a detailed understanding of security best practices, Cloud Security Alliance control architectures and related risks.
• Ability to solve complex GCP IAM challenges with automated solutions.
• Knowledge of automation, governance, identity and access management, logging and monitoring, configurations, compliance methodologies, controls and associated risks.
• Strategic thinking, ability to develop long term strategic plans for GCP IAM security programs in a way that scales in conjunction with organizational adoption goals.
• Detailed understanding of GCP IAM security, architectures, best practices, and related risks.
• Knowledge of industry leading GCP IAM tools and applicability to the CVS cloud ecosystem.

Requirements

• 5+ years of experience in Cloud or related Infrastructure Technologies.
• 3+ years of experience in GCP IAM specific disciplines.
• 3+ years of experience with Python automation.
• 2+ years of experience in the Software Development Lifecycle and CI/CD pipeline security concepts and technologies.

Nice-to-haves

• Thorough understanding of GCP IAM automation methods and related security implications.
• Deep understanding various GCP IAM offerings and their consumption models.
• Security Risk Analysis Procedures & Best Practices.
• Continuous learner well informed on technology trends, tools, methodologies, and models.
• Ability to manage a high degree of complexity and distill information that provides clear direction.
• Comfortable operating within areas of ambiguity to iterate and make progress in a consistent manner.
• Agility to deal with a constantly changing business environments.

Benefits

• Full range of medical, dental, and vision benefits.
• 401(k) retirement savings plan.
• Employee Stock Purchase Plan.
• Fully-paid term life insurance plan.
• Short-term and long-term disability benefits.
• Numerous well-being programs.
• Education assistance.
• Free development courses.
• CVS store discount.
• Discount programs with participating partners.
• Paid Time Off (PTO) or vacation pay.
• Paid holidays throughout the calendar year.