Source description
About the role
Description: The role of Senior Cloud Security Engineer will be part of the Enterprise Information Security Strategic Programs and Cloud Engineering team responsible for cloud enablement. This role will be engaged in numerous projects to enhance and automate cloud platform controls. In addition, as part of a highly agile and cross functional team, this role will lead security engineering projects that include but not limited to prototyping new technologies, tools and patterns for promoting digital healthcare in public cloud. Understanding cloud threats and driving to technical solutions enables the engineer to constant work on exciting challenges. As threats, regulatory requirements and business challenges change, this role will contribute to the manifestation of Clients control framework and contribute to engineering cloud controls as code, native cloud tool enablement and secure configurations. The Senior Cloud Security Engineer will be engaged with many workload teams identifying new patterns and supporting the teams embrace cloud for healthcare. Major Responsibilities * Lead the development of cloud solutions and platform infrastructure that include balancing simplicity, standards, scalability, security, extensibility, supportability that are hosted on public cloud platforms * Champion the design and engineer security patterns that facilitate modern cloud adoption with embedded security * Foster high-performance, collaborative technical work across multiple stakeholders and teams. * Drive platform control maturity and align with cyber security frameworks * Evaluates new cloud controls against existing native and third-party alternatives * Mentor and support the development of members of the team Required Qualifications * 5 years of platform engineering, preferably with public cloud platforms (AWS, Azure or Google) using tools such as Terraform (infrastructure as code) * Experience with writing secure code, and with DevSecOps engineering * Experience building enterprise cloud patterns with automated security * Experience leading agile engineering teams * Experience using Mitre @ttack framework, Cloud Security Alliance and/or NIST cloud frameworks Preferred Qualification * Bachelors Degree in software engineering, computer science, or related subject or significant experience * Experience with secure engineering using Golang, Python, Ruby or similar languages * 2 or more years experience with securing healthcare workloads in public cloud * Strong Oral and written communications skills to enable effective and meaningful information exchange between technical and non-technical people across multiple levels of organizational structure Are you open to candidates that would need to be 100% remote for the duration of the engagement? Yes. Either way, 100% remote will be the current option, but they will need to travel to corp for essential design meetings only, when that is permitted. Are you open to candidates that cannot convert to FTE without sponsorship? Eligible consultants must be able to convert perm without sponsorship now or in the future What does the team structure look like - how many members and what is the break-down of the teams skill sets? We have one team, 13 people, 4 are security architectures and solution driven engineers, the others are TDP and product engineers. Scattered throughout the US and
More at Thoughtwave Software and Solutions