Cloud Security Engineer

DRW • Chicago, IL

6h • $150,000 - $200,000

About The Position

DRW is seeking a Cloud Security Engineer to work with business units across the firm and help technologists deliver secure cloud infrastructure and cloud-integrated solutions. The role partners with technology teams to ensure cloud environments are configured securely and defines global standards and guidelines for secure cloud development. The successful candidate will establish baseline guidelines, implement security controls, review architectures, and validate that security practices are repeatable and automatable, helping keep DRW’s overall cloud presence secure.

The engineer will review cloud environments across multiple business units, support secure cloud development and migration, provide architectural guidance for cloud and Kubernetes deployments, and help integrate services and access routes in a data-intensive hybrid cloud environment. The role also includes evaluating vendors and products, identifying and remediating vulnerabilities, improving privilege models, and responding to security incidents.

The annual base salary range is $150,000 to $200,000 USD, depending on experience, qualifications, and relevant skills. The position is also eligible for an annual discretionary bonus. DRW offers employee benefits including group medical, pharmacy, dental and vision insurance, a 401(k) with discretionary employer match, short- and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts.

Requirements

• Bachelor’s degree or relevant work experience.
• At least 5 years of experience working with Amazon Web Services, with exposure to other cloud vendors such as Google Cloud Platform and Microsoft Azure.
• Strong knowledge of cloud encryption technologies, including key management such as KMS and HSM.
• Strong command of infrastructure-as-code tools such as Terraform, CloudFormation, and related technologies.
• Proficiency with containerization and Kubernetes in Linux environments, including Kubernetes architecture, workloads, networking, managed services, security configuration assessment, vulnerability remediation, and automated guardrails using infrastructure-as-code and policy-as-code.
• Proficiency in at least one applicable programming language, such as Python, Go, or JavaScript.
• Experience with cloud automation and services used in loosely coupled serverless architectures, such as Lambda, SQS, API Gateway, and DynamoDB.
• Knowledge of cloud security best practices and cloud-based controls.
• Familiarity with security considerations, capabilities, and regulatory adherence for services across cloud providers.
• Working knowledge of networking in hybrid cloud environments.
• Ability to work well in a fast-paced, dynamic environment, with strong work ethic and initiative.
• Proven ability to troubleshoot and resolve production problems and make sensible decisions under stress.
• Excellent verbal and written communication, documentation, and knowledge management skills.

Nice To Haves

• Relevant cloud certifications are a plus.

Responsibilities

• Review and audit AWS, GCP, and Azure environments across business units and recommend changes to reduce risk and improve security.
• Support development and collaborate with technologists across the firm to unify cloud security efforts.
• Integrate services and access routes in a data-intensive hybrid cloud environment.
• Provide architectural recommendations and support for secure deployment of cloud and Kubernetes environments, including controls for role-based access, workload identity, network policies, secrets, container images, admission policies, runtime protection, logging, and monitoring.
• Recommend and create working examples of secure hybrid cloud implementations.
• Help business units securely migrate software designed for on-premises environments to appropriate cloud technologies.
• Stay current with developments in cloud technology, security, services, and networking.
• Work with vendors and vendor solutions to evaluate products, make recommendations, and educate internal clients.
• Identify and analyze vulnerabilities and work with business units on remediation.
• Continuously assess and enhance cloud privilege models to ensure least-privilege access to data and services.
• Respond to security-related incidents.

Benefits

• Annual discretionary bonus eligibility.
• Group medical insurance.
• Pharmacy benefits.
• Dental insurance.
• Vision insurance.
• 401(k) with discretionary employer match.
• Short- and long-term disability insurance.
• Life and AD&D insurance.
• Health savings accounts.
• Flexible spending accounts.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior