Senior Associate, Cloud Security Engineer

Job Description

• The Senior Associate, Cloud Security Engineer plays a crucial role in ensuring the security, compliance, and resilience of cloud environments, with a focus on implementing Policy as Code (PaC) and Infrastructure as Code (IaC) practices.
• This involves implementing security controls, utilizing security tooling for Cloud Security Posture Management (CSPM), and collaborating with application developers' security champions.

Key Responsibilities

• Design, implement and support security measures for cloud platforms (3rd Party, Open Source, native), with a specific emphasis on Azure and AWS
• Develop PaC and IaC through Terraform, maintaining security policies and procedures aligned with industry-standard standards such as CIS and NIST 800-53
• Utilize and implement CSPM tools such as Wiz and Microsoft Defender for Cloud to continuously assess, monitor, and enforce security controls
• Work closely with security colleagues in various business units, providing guidance and support for their specific security needs
• Contribute to cloud security roadmap to further enhance security practices
• Conduct regular security assessments, audits, and reviews of cloud configurations
• Investigate and respond to security incidents, conducting root cause analysis and implementing corrective actions

Skills and Qualifications

• Proven experience working in public cloud as an engineer or developer role
• Strong Infrastructure-as-Code (IaC) expertise using Terraform
• Proficiency in Python or familiarity with Python-based DevOps tools and automation frameworks
• Experience with Git-based version control/CI/CD pipelines and technologies (e.g. GitHub Actions, GitHub Package Repository)
• Deep understanding of cloud security principles and the integration of security into development workflows
• Practical knowledge of cloud infrastructure (AWS, Azure, or GCP) and cloud-native architectures
• Experience with privileged access management and identity systems (e.g., Azure Entra, Okta, Ping)

Work Authorization

• Applicants must have the right to work in Ireland at the time of application and for the duration of employment.
• Please note that Northern Trust is unable to provide employment permit sponsorship for this role. This includes Critical Skills Employer Permits, General Employment Permits, Intra-Company Transfer Employment Permit, Dep Startup VISs, Innovation Support, and Researcher visas. This includes "dependent visa" whose primary visa holder holds a Stamp 4 visa only.

Working with Us

• As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability.
• Movement within the organization is encouraged, senior leadership is accessible, and you can take pride in working for a company committed to an inclusive workplace and social responsibility.