Senior Associate, Cloud Security Engineer

Job Description

• The Senior Associate, Cloud Security Engineer plays a crucial role in ensuring the security, compliance, and resilience of cloud environments, with a focus on implementing Policy as Code (PaC) and Infrastructure as Code (IaC) practices.
• This involves implementing security controls, using security tools for Cloud Security Posture Management (CSPM), and collaborating with the security champions of application developers.

Key Responsibilities

• Design, implement, and support security measures for cloud platforms (third-party, open-source, native), with a specific focus on Azure and AWS
• Develop PaC and IaC using Terraform, while maintaining security policies and procedures that align with industry standards such as CIS and NIST 800-53
• Use and implement CSPM tools such as Wiz and Microsoft Defender for Cloud to continuously assess, monitor, and enforce security controls
• Work closely with security colleagues in various business units, providing guidance and support for their specific security needs
• Contribute to the cloud security roadmap to further enhance security practices
• Conduct regular security assessments, audits, and reviews of cloud configurations
• Investigate and respond to security incidents, conduct root cause analysis, and implement corrective actions

Skills and Qualifications

• Proven experience working in the public cloud in an engineering or development role
• Strong expertise in Infrastructure-as-Code (IaC) using Terraform
• Proficiency in Python or familiarity with Python-based DevOps tools and automation frameworks
• Experience with Git-based version control and CI/CD pipelines and technologies (e.g., GitHub Actions, GitHub Package Repository)
• A deep understanding of cloud security principles and the integration of security into development workflows
• Practical knowledge of cloud infrastructure (AWS, Azure, or GCP) and cloud-native architectures
• Experience with privileged access management and identity systems (e.g., Azure Entra, Okta, Ping)

Work Authorization

• Applicants must be authorized to work in Ireland at the time of application and for the duration of their employment.
• Please note that Northern Trust is unable to sponsor employment permits for this role. This includes Critical Skills Employer Permits, General Employment Permits, Intra-Company Transfer Employment Permits, Dep Startup VISs, Innovation Support visas, and Researcher visas. This also includes "dependent visas" where the primary visa holder holds only a Stamp 4 visa.

Working with Us

• As a Northern Trust partner, you will be part of a flexible and collaborative work culture with a strong history of financial strength and stability.
• Movement within the organization is encouraged, senior leadership is approachable, and you can take pride in working for a company committed to an inclusive workplace and social responsibility.