IT Engineer IV - Cloud Platform Security Solutions (Tulsa, OK, US, 74101)

BOK Financial Corp.•Tulsa, OK

57d

About The Position

The IT Engineer IV - Cloud Platform Solutions is responsible for building secure, scalable, and automated cloud infrastructure. This role brings a security-first mindset to infrastructure-as-code practices and works across engineering, security, and application teams to implement secure policies, automate cloud governance, and support compliant migrations in Azure and AWS. They will be responsible for working collaboratively with multiple teams to implement highly available and secure cloud technologies. This role is also responsible for continuous monitoring and optimization of the cloud implementation for efficiencies and continuous support of, and collaboration with, other teams and projects, particularly DevOps, platform and automation teams. The person in this role must be a highly collaborative, creative and intellectually curious individual who is passionate about forming and implementing cutting-edge cloud computing capabilities. Extensive engineering experience is required as this role provides tier 3 support for technology teams in the organization.

Requirements

4+ years of experience in cloud platform engineering, with a focus on AWS and/or Azure.
Strong hands-on experience with Terraform, YAML, pipelines, scripting (PowerShell, Bash), and Git.
Strong understanding of IAM, cloud networking, secrets management, and encryption.
Familiarity with security tools such as SonarQube, Checkmarx, Wiz and container security scanners.
Experience with Python development and AI Agent tools such as Amazon Bedrock Agent or Microsoft CoPilot.
Experience with Kubernetes and container security best practices.
Ability to work cross-functionally with application, security, and DevOps teams.
Strong communication, documentation, and troubleshooting skills.

Responsibilities

Design and deploy secure and compliant cloud solutions using in AWS and Azure using Terraform, GitLab, and CI/CD pipelines.
Design and implement Hashicorp Sentinel policies and policy sets in Terraform Cloud.
Develop policy-as-code frameworks (e.g., Azure Policy, AWS SCPs) to enforce governance and compliance.
Collaborate with security and application teams to implement secure architectures and mitigate risks.
Proactively manage and mitigating the risks associated with cloud environments.
Implementing and validating robust IAM and network policies.
Integrate automated testing and security controls into CI/CD workflows (SAST, DAST, code scanning).
Contribute to secure cloud migrations, threat modeling, and incident response planning.
Design and develop Rego Syntax OPA policy as code to enforce & govern Kubernetes environments.
Design and enforce Kubernetes and cloud network security policies to enforce zero-trust security model.
Provide Tier 3 support and serve as subject matter expert on cloud platform and automation.
Strategize, consult, and prototype alongside other engineers to implement best practices and solutions for applications utilizing CI/CD and cloud.
Cultivate a strong knowledge of Identity Management including AWS Managed AD, Azure AD, Azure Resource roles and access reviews
Cultivate a strong understanding of Cloud Policies and how to create custom policies.
Collaborate with development team members to troubleshoot, and resolve problems that may exist in cloud-hosted environments.
Ensure that cybersecurity controls are met or exceeded.
Have efficient communication with application stakeholders about application availability & platform updates including any application outages, issues, failures, availability delays etc.
Work within established configuration and change management policies to ensure awareness, approval and success of changes made to the infrastructure.