Cloud Infrastructure Security Engineer

The Cloud Infrastructure Security Engineer will primarily be responsible for security of the cloud accounts (AWS and Azure) and will also involve planning, architecting, and managing an efficient and secure cloud environment to contribute from a security standpoint. This person will work with a variety of SIEM and issue tracking tools to resolve and keep track of security remediation. The Engineer must stay current with the latest tools and best practices in the industry. This role is also responsible for working with the Manager and Director to set the vision for Cardinal's cloud security posture.

What You'll Do:

• Develop and audit applications for common security risk.
• Provide guidance on best practices for security in cloud.
• Research, evaluate, and implement cloud native security tools to improve application and information security.
• Set up and maintain tools for continuous security auditing.
• Build architecture diagrams for existing applications and infrastructure.
• Act as a cloud security subject matter expert for security stakeholders.
• Review cloud architecture and advise on strong security design principles.
• Responsible for security findings in SIEM tools (Dome9, AlertLogic, ShiftLeft, etc.), and collaborate with multiple teams to resolve the findings.
• Develop security-related artifacts and scripted solutions to help teams integrate security into cloud environments.
• Participate in internal and external audits to answer any questions and provide required evidence.
• Mentor other team members and help them understand the security requirements and implement meaningful solutions.
• Create and maintain documentation as it relates to cloud security designs/configurations, processes, standards, and recommendations.
• Collaborate with senior management and department leaders to assess near- and long-term cloud security needs.
• Automate processes start to finish and work closely with cloud solutions engineering and product teams to help integrate security into existing processes.
• Work with internal teams to plan for future needs.
• Learn new technologies to take advantage of cloud computing.
• Lead research of new cloud technologies and keep up to date on forthcoming offerings.
• Troubleshoot technical issues and provide support for incident resolution.
• Work on multiple cloud providers as required.

What We Need You to Have:

• Minimum of a Bachelor's degree in a technical or related discipline.
  In lieu of a degree, a high school diploma or equivalent, with four or more years of related experience and/or training, or an equivalent combination of education and experience, will be considered.
• At least 3 years of experience with cloud infrastructure, in either AWS or Azure environment.
• Certification in either AWS or Azure cloud environment.
• Ability to learn new technologies either provided as cloud services or solutions external to that stack.
• Real-world experience with configuration of log aggregation SIEM solutions through IAC.
• Experience in cloud native security-related tools (AWS Guard Duty, AWS WAF, AWS CloudTrail, etc.).
• Experience administering Identity Access Management.
• Demonstrated commitment to security best practices.

What We'd Like You to Have:

• Master's degree in a technical discipline.

Physical Requirements:

Visa is an EEO Employer.  Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status.  Visa will also consider for employment qualified applicants with criminal histories in a manner consistent with EEOC guidelines and applicable local law.

This position will be performed in an office setting.  The position will require the incumbent to sit and stand at a desk, communicate in person and by telephone, frequently operate standard office equipment, such as telephones and computers, and reach with hands and arms.

This position requires the incumbent to be available during core business hours.

This position requires the incumbent to travel for work 5-10%  of the time, when safe to do so.

Work Authorization: Authorization to work in the U.S. is a precondition of employment for this position. Visa will not sponsor applicants for work visas in connection with this position.

Relocation assistance will not be offered.  

Location:

This role is eligible for remote work from anywhere in the US, or could be based out of our headquarters in Cleveland, OH.