Cloud Security Engineer

DRW • Chicago, IL

4d

About The Position

DRW is seeking a Cloud Security Engineer to work with business units across the firm to help technologists deliver secure cloud infrastructure and cloud-integrated solutions. The role partners with technology teams to secure cloud environments, define global standards and guidelines for secure cloud development, implement security controls, review architecture, and validate that security practices are repeatable and automatable. The position also supports the overall security of DRW’s cloud presence.

Requirements

• Bachelor’s degree or relevant work experience.
• At least 5 years of experience working with Amazon Web Services.
• Strong knowledge of cloud encryption technologies, including key management such as KMS and HSM.
• Strong command of infrastructure-as-code tools such as Terraform and CloudFormation, and related technologies.
• Proficiency with containerization and Kubernetes in Linux environments, including Kubernetes architecture, workloads, networking, managed services, security configuration assessment, vulnerability remediation, and automated guardrails using infrastructure-as-code and policy-as-code.
• Proficiency in at least one applicable programming language, such as Python, Go, or JavaScript.
• Experience with cloud automation and services used in loosely coupled serverless architectures, such as Lambda, SQS, API Gateway, and DynamoDB.
• Knowledge of cloud security best practices and cloud-based controls.
• Familiarity with security considerations, capabilities, and regulatory adherence for services across cloud providers.
• Working knowledge of networking in hybrid cloud environments.
• Ability to work well in a fast-paced, dynamic work environment, with strong work ethic and initiative.
• Proven ability to troubleshoot and resolve production problems and make sensible decisions under stress.
• Excellent verbal and written communication, documentation, and knowledge-management skills.

Nice To Haves

• Relevant cloud certifications are a plus.
• Exposure to cloud providers other than AWS, such as Google Cloud Platform and Microsoft Azure.

Responsibilities

• Review and audit AWS, GCP, and Azure environments across business units, and recommend changes to reduce risk and improve security.
• Support development and collaborate with technologists across the firm to unify cloud security efforts.
• Integrate services and access routes in a data-intensive hybrid cloud environment.
• Provide architectural recommendations and support for secure cloud and Kubernetes deployments, including role-based access, workload identity, network policies, secrets, container images, admission policies, runtime protection, logging, and monitoring.
• Provide recommendations and working examples of secure hybrid cloud implementations.
• Help business units securely migrate software designed for on-premises environments to appropriate cloud technologies.
• Stay current on developments in cloud technology, security, services, and networking.
• Work with vendors and vendor solutions to evaluate products, make recommendations, and educate internal clients.
• Apply knowledge of technologies that can be used across cloud and on-premises deployments, including user-supported authorization.
• Identify and analyze vulnerabilities and work with business units on remediation.
• Continuously assess and enhance cloud privilege models to ensure least-privilege access to data and services.
• Respond to security-related incidents.

Benefits

• Annual discretionary bonus eligibility.
• Group medical insurance.
• Pharmacy coverage.
• Dental insurance.
• Vision insurance.
• 401(k) with discretionary employer match.
• Short- and long-term disability insurance.
• Life and AD&D insurance.
• Health savings accounts.
• Flexible spending accounts.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior