Cloud Platform Security Engineer - Manager

Cloud Platform Security Engineer, Charles River Development, Officer

Who we are looking for

Charles River Development is looking for an experienced Security Engineer to work in the Cloud Platform Engineering team to enable defense-in-depth for complex application environments. In this role, you will help to harden the cloud environment and implement guardrails to prevent and detect misconfigurations across a variety of technologies.

Why this role is important to us

The team you will be joining is a part of Charles River Development (or CRD), that became a part of State Street in 2018. CRD helps create enterprise investment management software solutions for large institutions in the areas of institutional investment, wealth management and hedge funds. Together we have created first open front-to-back platform - State Street Alpha, that was launched in 2019.

Join us if delivering next generation infrastructure, using emerging technologies like AI and Blockchain sounds like a challenge you are up for.

What you will be responsible for

As Cloud Platform Security Engineer, you will

• The position is a highly technical role that will participate in the design and delivery of Azure infrastructure deployment and mitigation of information security risks
• Evaluate, implement, and operationalize new security capabilities in products such as Defender for Cloud, Azure Sentinel, Azure Policy, and Azure DevOps
• Apply knowledge and/or skills of scripting, cloud technologies and computer forensics, security posture assessment, and requirements-based hardening in connection with job responsibilities
• Implement defense-in-depth for cloud application and data platforms such as Kubernetes, Container Registries, Database Platforms, API Management, and other services
• Apply knowledge about Identity and Access Management in the cloud, including SAML, Open ID Connect, Azure AD Conditional Access Policies, and B2B/B2C capabilities
• Prepare security engineering diagrams and keep existing security diagrams up to date
• Design and implement solutions for data protection using best practices to encrypt data at rest, data in motion, and data in use
• Develop assets to help teams gain better visibility into the security posture of resources deployed to the cloud, including custom policies, scripts, and Log Analytics queries / workbooks
• Balance pragmatism with vision; continually assess the security posture of cloud applications and deliver improvements to the team’s tools, processes and codebase
• Contribute and drive knowledge sharing, documentation & collaboration
• Be a team player, accountable, self-motivated and delivery focused engineer

What we value

• Hands-on working experience designing/implementing secure platforms for applications and data
• Ability to assist, contribute & lead when required with prototyping various platform specific security solutions & technologies
• Hands on experience of codifying secure cloud platform provisioning activities using tools such as Terraform, Azure Policy, Ansible, and PowerShell DSC
• Experience in supporting Windows and Linux-based infrastructure
• Hands on governance audit/enforcements using Azure policies (preferably Policy as Code)
• Experience with Next Gen firewalls, Web Application Firewalls, and API Gateways is a plus
• Programming experience using Java, Python, C#, and/or PowerShell is a plus
• Understanding of Azure networking and security infrastructure to support Azure IaaS and PaaS solutions
• Hands-on experience in the designing, deployment, and support of security appliances, software, and other SaaS-based security offerings in a public cloud
• Vast understanding of change management and security audit processes
• Excellent oral and written communication skills
• Ability to interact with technical staff across multiple systems and disciplines

Education & Preferred Qualifications

• Bachelor’s degree or equivalent work experience
• Strong interpersonal and communication skills
• Azure Security Engineer Associate certification and/or Industry-standard security certifications such as Azure Administrator Associate, Azure Solutions Architect Expert, and CompTIA Cybersecurity Analyst

Additional requirements

• Comfortable in the global working environment

About State Street

What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients.

Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary by location, but you may expect generous medical care, insurance and savings plans, among other perks. You’ll have access to flexible Work Programs to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential.

Inclusion, Diversity and Social Responsibility. We truly believe our employees’ diverse backgrounds, experiences and perspectives are a powerful contributor to creating an inclusive environment where everyone can thrive and reach their maximum potential while adding value to both our organization and our clients. We warmly welcome candidates of diverse origin, background, ability, age, sexual orientation, gender identity and personality. Another fundamental value at State Street is active engagement with our communities around the world, both as a partner and a leader. You will have tools to help balance your professional and personal life, paid volunteer days, matching gift programs and access to employee networks that help you stay connected to what matters to you.

State Street is an equal opportunity and affirmative action employer.

Company: Charles River Development