Job Description
Responsibilities:
- Collaborate with cross-functional cloud teams including security, infrastructure, service engineering and business application teams to define and implement IAM roles and policies required to build, support and consume services in public cloud.
- Define and develop security controls and tools to ensure IAM implementation in public cloud environments are compliant with cloud security standards and policies.
- Build automation and libraries to enable developers to create IAM identities and permissions through self-service. Deliver IAM solutions through CI/CD pipelines with automated testing and validation.
- Build and enhance Python-based frameworks used for:
- Security control orchestration
- Detection and response workflows
- Develop integrations with:
- Cloud services (APIs, services, identity layers)
- Security tooling and platforms
- Contribute to:
- Preventative controls (policy enforcement, OPA/Rego)
- Detective controls (event-driven detection logic)
- Write and maintain:
- Automated unit tests
- Integration and behavioral tests
- Support CI/CD integration and continuous validation of controls
- Collaborate with:
- Security Controls Engineers
- Threat Modelers
- Cloud Architects
Qualifications:
This is not a traditional security or IAM role. It is a development-heavy engineering role requiring strong coding expertise. Candidates must have proven Python development experience.
- Minimum of 3 years of hands-on experience working with cloud-native services in AWS or GCP.
- Advanced proficiency in Python (non-negotiable)
- Experience with:
- API development and integrations
- Writing scalable, production-grade code
- Automated testing framework
- Experience in the design and implementation of enterprise security solutions in Financial Services or a large complex and/or global environment
- Highly motivated self-starter with excellent interpersonal and communication skills
- Ability to work independently, multi-task, and take ownership of various parts of a project or initiative.
- Relevant certifications such as CISSP, AWS Certified Security Specialty, Google Professional Cloud Security Engineer are desirable
- MUST pass a Karat Assessment – Python focused
Critical Competencies:
- Experience with infrastructure as code (IaC) tools: Terraform and CloudFormation
- Proficiency in Python, Go or Java
- Proficiency in unit testing frameworks such as Behave, pytest or Junit
- Proficiency in developing and securing SOAP and REST based web service APIs
- Experience in DevOps and agile methodologies and automated solution delivery and testing through CI/CD pipelines
Benefits Overview
- Discretionary Annual Incentive.
- Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
- Family Support: Maternal & Parental Leaves.
- Insurance Options: Auto & Home Insurance, Identity Theft Protection.
- Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
- Time Off: Vacation, Time Off, Sick Leave & Holidays.
- Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.
