Cloud Security Engineering & DevSecOps Lead

FIS • Atlanta, GA

1d • Remote

About The Position

We're seeking a Lead Cybersecurity Analyst, specializing in Cloud Security Engineering to join our Cloud Security and Emerging Technologies team. This position is responsible for designing and implementing security automation, preventative guardrails, and developer-integrated controls that enable secure-by-default cloud adoption. The ideal candidate will have strong hands-on experience securing cloud infrastructure and applications, partnering closely with engineering and development teams to embed security into cloud-native architectures while balancing risk, scalability, and business needs. This role requires a combination of technical skills, problem-solving aptitude, and cybersecurity expertise. The Cloud Security and Emerging Technologies team is responsible for securing the organization's multi-cloud environments while enabling the safe adoption of new cloud capabilities and technologies. The team combines security assessments, secure solution design, and scalable security engineering to identify risks, define remediation strategies, and implement preventative controls and guardrails across the cloud estate.

Requirements

• 10+ years of experience in information security, with at least 5 years focusing on cloud security.
• Deep understanding of cloud security services, automation patterns, and secure-by-default design principles across multi-cloud environments.
• Strong proficiency in Infrastructure-as-Code and automation tools such as Terraform, CloudFormation, Azure Bicep and Ansible.
• Hands-on experience integrating security controls into CI/CD pipelines using platforms such as Github Actions, Jenkins, Gitlab or similar tooling.
• Proficiency with version control systems such as Github, Gitlab, Bitbucket or similar systems, including branching strategies, pull request workflows, and collaborative development practices.
• Experience implementing and managing policy-as-code and preventative guardrails using cloud-native or third-party frameworks (e.g., AWS SCPs, Azure Policy, and OPA).
• Knowledge across multiple security domains, including DevSecOps, Cloud infrastructure security, container security, identity and access management, vulnerability management and threat detection.
• Experience with managing cloud security platforms and tooling (e.g., CNAPP), and operationalizing security controls at scale.
• Knowledge of compliance standards and benchmarks: SOC2, ISO 27001, CSA CCM, NIST CSF, PCI DSS, CIS benchmarks.
• Strong communication and leadership skills, with the ability to collaborate effectively with diverse teams.

Nice To Haves

• CCSP - Certified Cloud Security Professional
• CISSP - Certified Information Systems Security Professional
• AWS Certified Solutions Architect Associate / Professional
• AWS Certified Security Specialty
• AWS Certified DevOps Engineer
• Microsoft Security Architect
• Microsoft Security Engineer Associate

Responsibilities

• Design, build and maintain infrastructure-as-code (IaC) templates and reusable automation frameworks with embedded security guardrails across multi-cloud environments.
• Develop and enforce policy-as-code controls using cloud-native capabilities (e.g., AWS SCPs, Azure Policy, Open Policy Agent) to prevent misconfigurations and reduce risk at scale.
• Automate provisioning, configuration, and validation of cloud security controls and services, ensuring secure-by-default deployments.
• Integrate security controls and validation checks into CI/CD pipelines and developer workflows to enable shift-left security practices.
• Administer, integrate, and optimize cloud security platforms and tooling (e.g., CSPM, Container Security), including policy tuning, onboarding automation, and operational improvements.
• Monitor cloud environments for security posture risks, misconfigurations, and anomalous activity, and build automated detection and remediation capabilities where appropriate.
• Collaborate with engineering, platform and security teams to operationalize security architecture requirements and implement scalable remediation solutions.
• Support security investigations by providing cloud telemetry, automation, and technical expertise as needed.
• Provide technical leadership and guidance on cloud security best practices, automation patterns, and DevSecOps adoption across the organization.
• Contribute to enterprise security initiatives by standardizing controls, improving automation maturity, and driving continuous improvement of cloud security capabilities.
• Stay current on emerging cloud technologies, security threats, and defensive techniques to continuously enhance the organization’s security posture.
• Be a champion and advocate of cybersecurity within the company.

Benefits

• A competitive salary and benefits.
• A variety of career development tools, resources and opportunities.
• The chance to work on some of the most challenging, relevant issues in financial services & technology.
• FIS is committed to providing its employees with an exciting career opportunity and competitive compensation.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed