Cloud Security Engineer

1w1 week ago

Nationwide

Columbus, US · Full-time · $95,500 – $177,500

About this role

Nationwide’s Technology team enables a Fortune 100 company with nearly $70 billion in annual sales to drive innovation and adopt new technologies that deliver business results. Customers are at the center of everything we do, seeking associates passionate about delivering extraordinary care. This role works a hybrid schedule coming into the Columbus, Ohio office 2 days per week.

Cloud Security Engineering team seeks a hands-on technologist who enjoys learning, building, and solving complex problems across cloud platforms. Work primarily with Microsoft Azure while gaining exposure to Amazon Web Services. Define, implement, and mature cloud controls to defend against current and emerging threats.

As a contributing member of the Cloud Security Engineering team, collaborate with business partners, security teams, and Information Risk Management. Promote DevSecOps culture with focus on security controls like IAM and compliance. Implement infrastructure-as-code and CI/CD automation to standardize deployments.

Grow expertise in security engineering, automation, and multi-cloud policy implementation and enforcement. Stay current on cloud security vulnerabilities, policies, standards, and regulations. Partner on vulnerability remediation strategies and ensure compliance for migrated workloads.

Requirements

Experience with any major cloud technology (Azure, AWS, GCP, Kubernetes)
Hands-on cloud engineering skills with interest in expanding to cloud security or multi-cloud engineering
Expertise in security engineering, automation, and multi-cloud policy implementation and enforcement
Primary experience with Microsoft Azure and exposure to Amazon Web Services
Knowledge of DevSecOps practices, IAM, and security compliance controls
Familiarity with infrastructure-as-code and CI/CD for cloud security deployments
Ability to address cloud security vulnerabilities, policies, standards, and regulations

Responsibilities

Promote DevSecOps culture including training and outreach to application development teams with focus on security controls (IAM, security compliance)
Design, build, and deploy tools and reports that provide visibility into cloud accounts, instances, and services
Implement infrastructure-as-code and CI/CD automation to standardize and scale cloud security team deployments
Stay current on cloud security vulnerabilities, policies, standards, and regulations to ensure cloud environments manage risk appropriately
Continuously work with business partners on vulnerability remediation strategies
Partner with security teams to enhance cloud security solutions and establish preventative controls via automation
Partner with security teams to ensure migrated workloads maintain compliance and governance requirements
Collaborate with Information Risk Management to ensure all cloud products and services meet configuration and compliance standards